Free tool · no signup · runs in your browser
AI agent guardrails generator: what your Bot may do without asking
Pick the apps your agent can reach. You get narrow Ask first rules for sending, publishing, paying, deleting and changing permissions, optional read-only Allow automatically rules, and a boundary line to paste into each request. For Grok Bot, add the rules in Settings, General, Auto-review, where Ask first always wins.
Everything is built in your browser. Nothing you pick or type is sent or stored, and the link holds only your app choices.
Make your AI agent guardrails
Ask first rules (15)
In Grok Bot, open Settings → General → Auto-review and add each line as an Ask first rule.
- Ask first before sending, replying to or forwarding any email from Gmail.
- Ask first before deleting any email in Gmail.
- Ask first before changing Gmail settings, filters or forwarding.
- Ask first before sending any calendar invitation or reply to one in Google Calendar.
- Ask first before changing or cancelling any event in Google Calendar.
- Ask first before sharing a Google Calendar or changing who can see it.
- Ask first before deleting, moving or overwriting any file in Google Drive.
- Ask first before sharing a Google Drive file or folder or changing who can access it.
- Ask first before sending any external email.
- Ask first before publishing or posting anything public.
- Ask first before any purchase, payment, refund or money transfer.
- Ask first before deleting or overwriting any file, record or message.
- Ask first before changing permissions or sharing access to any account, file or folder.
- Ask first before changing a production dashboard, live website or anything customers see.
- Ask first before accepting any terms, contract or agreement.
Boundary line for the request
Paste it into the request, after the job, so the Bot knows where to stop.
Reply to new customer emails and prepare drafts only. Do not send or post anything, delete or overwrite anything or change who can access anything. Ask for approval after showing the current value, proposed value, and expected impact.
What each app may do
| App | Without asking | Drafts for you | Ask first |
|---|---|---|---|
| Gmail | Read and search email (only with an Allow rule) | Reply drafts you send yourself | sending messages or invitations; deleting or overwriting data; changing permissions |
| Google Calendar | Read your calendar (only with an Allow rule) | Suggested times and event details | sending messages or invitations; deleting or overwriting data; changing permissions |
| Google Drive | Read files (only with an Allow rule) | New files in one drafts folder | deleting or overwriting data; changing permissions |
Keep in mind
- An approval from work that started without you, such as a routine, a trigger, or a message from another Bot, expires after about 10 minutes; the card then shows Expired, and the action does not run. Our tip: have unattended routines save drafts and report, so nothing waits on an approval card.
- Ask first rules always stop matching actions for you. If an Ask first and an Allow automatically rule both match, Ask first wins.
- Auto Review is model-based and should complement, not replace, least privilege and explicit approval boundaries. Avoid broad rules such as "allow everything in the browser."
- Personal Auto-review rules are stored on the current desktop and synced to its Grok Bot computer, so another desktop installation needs its own.
- An approval controls the proposed action. It does not reverse work already completed. Don't approve an action whose target or effect you can't identify; ask for a plain-language explanation or a draft first.
- For passwords, two-factor codes and payment confirmations, choose Take over and do the step yourself. Don't send a password or one-time code in ordinary chat.
Source: xAI docs: Approvals, security, and privacy, checked 21 Oct 2026.
The 7 actions xAI says need a clear boundary
xAI's approvals doc says to prefer explicit boundaries for these. Every set of rules this tool makes covers all 7.
- Sending messages or invitations
- Publishing content
- Purchases and financial transfers
- Deleting or overwriting data
- Changing permissions
- Production changes
- Accepting legal terms
How to set AI agent guardrails in Grok Bot
- Pick your apps. Choose every app or place your agent can reach, and say whether it runs on its own.
- Add the rules. In Grok Bot, open Settings → General → Auto-review and add each Ask first line. Add the Allow automatically lines only if you want reads to go through.
- Set a boundary per request. Paste the boundary line after the job, so the Bot drafts and stops before anything you listed.
FAQ
What are AI agent guardrails?
Limits on what an agent can do without a person saying yes. xAI's approvals doc recommends explicit boundaries for sending messages or invitations, publishing content, purchases and financial transfers, deleting or overwriting data, changing permissions, production changes and accepting legal terms.
How do I set permissions in Grok Bot?
xAI's approvals doc says to open Settings → General → Auto-review and add rules. Ask first rules always stop matching actions for you. Allow automatically rules let matching actions proceed only when the automated review does not identify another reason to stop. If both kinds of rule match, Ask first wins.
What happens if my routine needs approval while I'm away?
xAI's approvals doc says an approval from work that started without you, such as a routine or a trigger, expires after about 10 minutes; the card then shows Expired, and the action does not run. To finish the task, ask the Bot to try again.
Is Auto-review enough on its own?
No. xAI's approvals doc says Auto Review is model-based and should complement, not replace, least privilege and explicit approval boundaries. Write narrow rules around a known action and scope, and avoid broad ones such as "allow everything in the browser."
Do my Auto-review rules work on every computer?
Not automatically. xAI's approvals doc says personal Auto-review rules are stored on the current desktop and synced to its Grok Bot computer, so another desktop installation needs its own. Team rules set by an admin show as locked.
Source: xAI docs: Approvals, security, and privacy, checked 21 Oct 2026. We're an independent site, not part of xAI. The rules are a starting point; read each one before you add it.
More: Grok Bot approvals explained, AI agent safety for small business, Grok Bot connector checker, Grok Bot connectors list, Grok Bot routine builder, what should my bot do? quiz, free templates, all free tools.