Agent Capabilities

What your AI agent can do — from messaging to browsing to email, all running in a secured, sandboxed environment.

Messaging channels

All messaging channels are available on every tier. Connect one or all.

Full two-way messaging with rich media support. DM pairing ensures only approved contacts can interact.

Discord

Channel and DM support with role-aware responses. Your agent joins your server as a bot.

Slack

Workspace integration with channel and direct message support. Thread-aware conversation handling.

Business API integration for customer-facing communication. Contact verification built in.

Browser automation

Your agent can navigate the web, interact with pages, and extract data — all inside a sandboxed browser.

Navigate to URLs and interact with page elements

Fill forms, click buttons, and submit data

Extract structured data from web pages

Take screenshots for verification

Sandboxed execution — browser cannot access the host system

Rate-limited per tier to prevent abuse

Email identity

Pro and Enterprise agents get their own email address for professional communication.

Your agent's own email

Choose a name during setup and your agent gets a dedicated email address. It can send and receive emails, with all HTML content sanitized for security on both inbound and outbound messages.

Inbound emails routed through secure email processing pipeline

Outbound emails sent through dedicated delivery infrastructure

HTML sanitization prevents XSS and content injection

Available on Pro ($159/mo) and Enterprise ($299/mo) plans

AI model access

Your agent has access to 100+ AI models through a multi-model routing layer.

100+ models from leading providers, selected automatically or by preference

Per-agent AI budget included with every tier (overage available via credits)

No conversation data leaves your agent without your explicit configuration

Smart routing optimizes for cost, speed, and capability per request

Tool sandboxing

Every tool your agent uses runs in an isolated sandbox that is destroyed after execution.

Isolated Docker containers per tool execution

Read-only filesystem — tools cannot install persistent software

Strict CPU and memory limits prevent resource exhaustion

No network access unless explicitly allowlisted

Containers automatically destroyed after execution completes

PID limits prevent fork bombs and process flooding

Tier comparison

All plans include all 7 security layers and all messaging channels.

Feature	Starter$69/mo	Pro$159/mo	Enterprise$299/mo
vCPUs	3	4	8
Memory	4 GB	8 GB	16 GB
Messaging channels	All	All	All
Browser pages	3	5	10
Browser actions / hr	100	500	2,000
Included AI budget	$5 / mo	$15 / mo	$30 / mo
Email identity
Python runtime
Custom skills

All plans include a one-time $49 setup fee. All plans include all 7 security layers and all messaging channels.

Ready to hire your first AI employee?

Production-ready in 5 minutes. All 7 security layers included on every plan.

Get Started See Pricing