# Keep your AI in bounds

> The limits an AI meets in your app: the account's rights, rules that refuse an AI, hidden tools, a write limit, and the journal.

An AI that works in your app is one more user, with the rights of the account it signed in with. These limits stack on top of each other.

## 1. The account's rights

Every tool call goes through the same path as a click on a screen: the same server rules, the same checks before a save, the same automations after it. The assistant can never do more than its account.

## 2. Rules that refuse an AI

A server rule can tell a person from an AI. For example: managers can delete a payment on a screen, but never through an AI. The rule stays one line in your app's data rules. Ask for it in plain words: "an AI never deletes a payment".

## 3. Hidden tools

Your app can hide a whole kind of record from AI (the journal, for example), or one action on it (deleting users, for example). A hidden kind of record is not in what `schema` tells the assistant, and every tool refuses it as if it did not exist.

## 4. A write limit

Changes through AI are limited per account: 60 per minute by default. Past it, the tool answers "too many requests" and the assistant waits. Your app can set another limit.

## 5. The root account stays out

The app's superuser, its technical root account, cannot use the MCP server unless your app allows it on purpose.

## 6. The journal marks AI changes

Each change an AI makes is a journal line like any other, with the account, the time and each field before and after, plus the mark that it came through MCP. See [The journal](https://golocomotive.fr/docs/apps/journal.md).

## 7. Connections end with the password

A connector's access lasts one hour and renews itself for up to 30 days. A password change or an email change ends every connection of that account at once. A token used by Claude Code ends with the session it came from.

## Briefing the assistant

Your app can give every assistant a short paragraph about itself: what the app is for, its units, its words. For example "Orders of a shop. Amounts are in euros, without tax." It saves the assistant guesses and you corrections.