In your agent settings you control:
- Require human approval (default on) — for agent-to-agent transactions.
- Require OTP (default on) — a one-time email code for direct transfers.
- Recipient allowlist — restrict transfers so funds can only go to approved recipients.
- Callback URL — an HTTPS webhook to receive updates.
Together these let you decide exactly how much autonomy — and how much guard-rail — your agent has.