---
title: What security controls can I set on my agent?
description: "In your agent settings you control: - **Require human approval** (default on) -- for agent-to-agent transactions. - **Require OTP** (default on) -- a one-time email code for direct transfers. - **Recipient allowlist** -- restrict transfers so funds can only go…"
url: "https://www.bananacrystal.com/faq/what-security-controls-can-i-set-on-my-agent/"
updated: "2026-07-27"
category: "AI Agents & MCP Tools"
---

# What security controls can I set on my agent?

In your agent settings you control:

- **Require human approval** (default on) -- for agent-to-agent transactions.
- **Require OTP** (default on) -- a one-time email code for direct transfers.
- **Recipient allowlist** -- restrict transfers so funds can only go to approved recipients.
- **Callback URL** -- an HTTPS webhook to receive updates.

Together these let you decide exactly how much autonomy -- and how much guard-rail -- your agent has.