The Security level decides how much ToolPiper asks before a tool runs for an AI agent. Disabled asks nothing, Default asks with a click, Balanced needs your password or Touch ID for tools that run commands or destroy something, and Strict needs it for every tool that acts. A new install starts at Default. Pick the level under Security in ToolPiper, and it applies to every app, chat and voice session that uses your tools.

What each level asks of an agent

These apply when an agent calls a tool you have made no choice for:

  • Disabled: nothing asks. Every tool runs, including the tools of a server you just added.
  • Default: a tool that acts asks, and a click answers it. Acting means changing something, reaching the network, running commands or destroying something.
  • Balanced: a tool that runs commands or destroys something needs your password or Touch ID. Other tools that act still take a click.
  • Strict: every tool that acts needs your password or Touch ID.

A tool that only reads runs at every level.

Your own controls and automations

When you use a control yourself, or an automation runs, there is no agent to ask through, so the level decides what is stopped:

  • Disabled stops nothing.
  • Default stops a tool that destroys something. From your own control it asks with a click. An automation you armed runs it, and one an app armed is refused.
  • Balanced also stops tools that run commands or change files. Your own control needs your password or Touch ID, and an automation is refused until you choose Allow for that tool.
  • Strict stops any tool that acts, handled as Balanced handles it.

Your own choices come first

The level decides only what you have not decided. At every level a tool you set to Deny is refused, a tool you set to Allow runs, and a tool you set to Ask is answered with a click. Choose a tool's rule under MCP Tools.

Changing the level

Raising the level asks for nothing. Lowering it asks for your password or Touch ID once.

If you have saved choices for tools, or changed a built-in firewall rule, picking a level opens one confirmation first. It lists exactly what each reset would change, with every removed Deny named first. A ticked list removes your saved choices for that subject so everything in it follows the new level. Untick a list to keep those choices. Credentials are listed unticked. Cancel changes nothing.

Pause

Pause for… beside the level control turns off what the level adds for 1 hour, 24 hours or 7 days, then returns to your level by itself. Starting a pause asks for your password or Touch ID, and ending it early asks for nothing. During a pause a tool that follows the level runs as it would at Disabled. Your own choices keep working: a tool you set to Ask still asks, and a tool you set to Deny is still refused.

What no level turns off

Every level, Disabled included, records what was allowed and what was refused, and keeps your plan's limits and your own Deny rules in force. Disabled means ToolPiper adds no questions of its own. It does not mean nothing is checked.

The Overview

Under the level control, the Overview shows three things the level sets, each with how many items follow the level, how many you changed, and a Reset that shows its exact list before anything is written: MCP Tools, Firewall rules and Credentials. It also shows three the level does not set: Tokens, Connected Apps and Activity.