Web access, shopping & trading controls

Your agents reach the web only through the Eniyan gate, and only at sites you allowlist — access fails closed. Everything here lives on the agent detail page (open any agent from /dashboard/agents) plus the purchase approval inbox at /dashboard/purchases.

Turn on web access

  1. Open the agent, find the Web access card (tagged allowlist-only, via eniyan-web), and click Enable web access. Nothing is reachable yet — a fresh agent has an empty allowlist.
  2. Connect the eniyan-web snippet at /dashboard/agents/connect.

The allowlist

Under Add a site, type a domain and click Allow. Exact example.com covers only that host; *.example.com covers the site and all its subdomains. New sites start read-only. Changes reach the running gate within a minute, and removing the agent’s credential cuts everything off immediately.

Per-site abilities

  • Read — fetch pages; Write — submit new things; Edit — change or delete what is already there.
  • Download — double-gated: turn on the Allow downloads checkbox on the card first, and the machine running the gate must also opt in locally.
  • Pay / Transact — lets the gate act at this site’s checkout. It stays locked until you set up shopping limits on this agent (below) or enable web execution in Settings.

Engine & injection screening

The Engine selector offers HTTP fetch — fast, no scripts, most docs/API use and Real browser — sign-in flows, posting, purchasing. The On suspected injection selector decides what happens when a fetched page looks like it is trying to instruct your agent: Risk-based — block flagged pages when this agent can write, edit or download; otherwise strip and warn (the default), Always block flagged pages, or Always deliver flagged pages with suspicious parts stripped.

Shopping limits

The Shopping card (tagged you approve every purchase) sets the limits Eniyan enforces. Click Set up shopping — it starts with a $50 per-purchase cap and every purchase needing your approval. The card then shows a checklist, Before this agent can shop: enable web access, switch the engine to Real browser, and tick Pay on at least one store in the allowlist. Then tune Per-purchase cap, Monthly budget (empty = no monthly cap), and Auto-approve under (0 = approve every purchase — the default). Pause shopping / Resume shopping stops and restarts it. Your card never reaches Eniyan or the model — it stays on the agent’s machine, filled locally at checkout; every Eniyan surface shows at most visa ****1234.

Approving purchases

  1. At a checkout the agent pauses and a request appears under Waiting for you on /dashboard/purchases — the exact amount, store, agent name, and an expiry countdown.
  2. Click Approve, then confirm with Yes, authorize followed by the exact amount — the approval is bound to that store and amount; nothing else can be charged against it. Deny refuses; an unanswered request expires.
  3. A purchase that used its approval but never reported an outcome holds the amount — click Release the hold to free it. History below keeps every request.

The Trading switch (Personal)

On Personal accounts, the agent detail page also shows a Trading card (tagged +$5/month when on). Flipping it on asks you to confirm — Enable trading for this agent? Adds $5/month while on. — and then lets the agent trade under a mandate you grant on the Trading page (/dashboard/trading). Off pauses its mandates on the very next order; on resumes them. Team, Business, and Scale accounts have no per-agent switch and no per-agent fee.

Related: Local agents — shopping setup and, for the API and SDK side of the gate, Harness integration — web.