From 41a3362431db490c08045105f77f78a16c470c3a Mon Sep 17 00:00:00 2001
From: arc53-machine <232052973+arc53-machine@users.noreply.github.com>
Date: Tue, 29 Sep 2026 15:55:50 +0100
Subject: [PATCH] Describe what the API write allowlist covers now

It covers writes on any credentials the owner holds, for API-key and
widget callers, public-link users and the schedules they set, not only
connected accounts reached with the API key.
---
 docsgpt/guardrails/config.py | 9 +++++----
 1 file changed, 5 insertions(+), 4 deletions(-)

diff --git a/docsgpt/guardrails/config.py b/docsgpt/guardrails/config.py
index 9af4ecd2..026049a7 100644
--- a/docsgpt/guardrails/config.py
+++ b/docsgpt/guardrails/config.py
@@ -212,10 +212,11 @@ class AgentConfig(BaseModel):
     model_config = ConfigDict(extra="forbid")
 
     guardrails: GuardrailsConfig = GuardrailsConfig()
-    # Write actions on the owner's connected accounts that anyone calling
-    # the agent with its API key (widget, API) or through its public link may
-    # run. Nobody there can approve for the owner, so any other such write is
-    # refused. ``tool_id:action``.
+    # Write actions on credentials the owner holds (a connected account, a
+    # saved API tool key, a stored secret, an MCP sign-in) that someone who
+    # can't approve for the owner may run: an API-key or widget caller, a
+    # public-link user, and schedules either of them set. Any other such
+    # write is refused for them. ``tool_id:action``.
     api_write_allowlist: List[str] = []
 
     @field_validator("api_write_allowlist")