Allowlists & Blocklists

Domain controls let you define exactly which external services an agent is permitted to spend toward. They operate on the hostname extracted from the spend request URL.

Allowlist

When allowlist is set, the agent may only spend toward hostnames in that list. Any other hostname returns 403 policy_domain_blocked.

policy: {
  dailyCap: "10.00",
  allowlist: [
    "api.openai.com",
    "api.anthropic.com",
    "api.pinecone.io",
    "replicate.com",
  ],
}

Blocklist

Blocklist entries are always rejected, even if the hostname also appears on the allowlist. Use blocklists to permanently prohibit data-exfiltration targets.

policy: {
  dailyCap: "10.00",
  blocklist: [
    "competitor-api.com",
    "known-phishing-domain.net",
  ],
}

Wildcard matching

policy: {
  allowlist: [
    "*.openai.com",       // matches api.openai.com, files.openai.com, etc.
    "api.anthropic.com",  // exact match only
  ],
}