Security & Privacy

Security & Privacy controls inbound access and tool approvals.

Inbound Access Policy

Controls who can message the worker.

Policy	What it does
Public	Anyone can message the worker. New senders are automatically added to contacts.
Account Members	Only users in your Odella organization can message the worker. External senders are blocked.
Access Code	New senders must provide a unique pairing code once. Access remains after pairing.

Controls the default approval behaviour for connected tools.

Policy	Behaviour
Recommended	Allows read-only tools, asks before writes/sends/sensitive actions, and blocks credential tools.
Approval-first	Asks before reads, writes, sends, or destructive actions. Credential tools remain blocked.
Restricted	Allows reads but blocks writes, sends, and destructive actions unless explicitly allowed.
Unrestricted	Allows reads and writes. Sends and destructive actions still ask. Credential tools remain blocked.

Saved rules override the default tool approval policy for specific tools.

Tools you allow or block permanently during approvals may appear here automatically. You can also add rules manually from the tool rule picker.

Review tool rules carefully for tools that send messages, edit production systems, manage credentials, or delete data.