Permissions & Security
Too Many Popups Frustrate Users; No Popups Means No Safety
If an Agent pops up a confirmation for every single step, you'll want to uninstall it after clicking "Allow" five times. But if it executes everything without asking, who's responsible for deleting the wrong file? The answer: risk-level grading.
Experience the Difference: Click "Start Demo"
No Grading: Popup at Every Step Poor UX
Graded: Only Popup for High-Risk Good UX
0
No Grading · User Confirmation Clicks
0
Graded · User Confirmation Clicks
The Risk-Grading Approach
Low Risk → Auto-execute
Reading files, searching info, viewing calendars, formatting text… these don't change any state, and errors have no cost. No popup needed.
High Risk → Must Confirm
Deleting files, sending messages, executing payments, changing permissions… these are irreversible or high-impact, so a popup confirmation is required.
The core question of risk grading: Who decides whether an action is high-risk or low-risk?
- Predefined by the PM — Set the risk level of each tool during the design phase (most common)
- AI decides — Let the model judge based on context whether "this needs human input" (more flexible, but not always accurate)
- User-defined — Let users configure which actions require confirmation (most flexible, but adds configuration overhead)
Having the AI judge "does this need human input?" is the core of risk grading. Good permission design isn't a binary "popup or not." It's fine-grained control over when to pop up and what to show.