Update
Forbidden Rules: hard limits on what an agent may read, change or delete — by platform, account, tool, who and data
TL;DR
Forbidden Rules are a workspace's own hard restrictions: a rule blocks reading, changing or deleting on chosen platforms, accounts or tools, and is checked before every call on every lane. Since 18 October 2026 a rule can also bind who acts and which kind of data it touches.
What a rule can block
- Actions: reading, changing or deleting — on chosen platforms, accounts or specific tools.
- Who (added 18 October): roles — admin, editor, member — and kinds of caller: people in the app, schedules and loops, API keys, connected apps.
- Data (added 18 October): audiences and customer lists, personal data, conversions, budgets and bids, creatives, reports, billing, account settings, email and catalog.
- Every lane asks the same check before the call: in-app tasks, autonomous runs, schedules, alert checks, dashboards, MCP, REST, raw API requests and approved queued writes. A blocked call sends nothing and says which rule stopped it.
Making a rule you can trust
- Saved off. A new rule does nothing until someone turns it on from the list.
- Templates and "Describe it in words". The draft maps your sentence onto your real platforms and accounts and saves nothing; a tool name that does not exist is dropped with a note.
- "Test this rule" simulates a call against the form before anything is turned on.
- Problem flags: a rule that cannot block anything is flagged, with a one-click fix where one exists.
- "Blocked N calls in the last 7 days" on each rule shows whether it is doing anything.
Side nav → Forbidden Rules. Admins create and edit rules; members can read them.
Frequently asked questions
- Can I stop an AI agent from touching a specific ad account?
- Yes. A Forbidden Rule can block reading, changing or deleting on chosen accounts, platforms or tools, and it is checked before every call — in the app, on schedules, over MCP and REST, and on raw API requests.
- Does a Forbidden Rule also apply to API keys and connected apps?
- Yes. The same check runs on MCP, REST and raw requests, and since 18 October a rule can be limited to — or written for — API keys, connected apps, schedules and loops, or people in the app.
- Is a new rule active as soon as I save it?
- No. Rules are saved off; you turn one on from the list, after testing it with "Test this rule" if you like.