Allowlist
Also known as: allow list · whitelist (agents)
An allowlist is an explicit list of what an agent may do — permitted tools, domains, or actions — with everything else denied by default.
- The agent can only touch what’s listed.
- A new tool or domain is blocked until added.
- The default-deny posture that makes agents safe.
Prefer it to blocklists: a blocklist only stops known-bad things; an allowlist permits only known-good things. For an agent that can act, default-deny is the safe posture.