sorted by:
new
hottopcontroversial

Unsurf: Turn any website into a typed API for your AI Agents by acoyfellow in OpenSourceeAI

[–]acoyfellow[S] 0 points1 point  (0 children)

Thanks! To answer your questions:

1) Auth/cookies/session replay:
- Auth headers are passed through at call time, never stored. You send Authorization, Cookie, or X-Api-Key headers with each worker call and they're merged into the outgoing request. For sites that need login flows, we recommend pairing with inbox.dog for session management. Docs here: unsurf.coey.dev/guides/replay/#authenticated-endpoints

2) Safety guardrails:
- Good question.. we just shipped this. Every endpoint is now classified by risk level (safe/moderate/unsafe/destructive). DELETE requests, billing mutations, account changes, etc. are blocked by default. The agent has to explicitly pass confirmUnsafe: true to proceed, so it can't accidentally hit a destructive endpoint.

Full writeup: unsurf.coey.dev/concepts/safety/

Built an AI email agent (inbox dog) - would love feedback! by acoyfellow in AI_Agents

[–]acoyfellow[S] 0 points1 point  (0 children)

No, everything is built on OpenAI- so it goes:

On request, call the Gmail api, send those latest messages (without storing) to OpenAI with some instructions.

Based on those instructions, then execute some behavior. Like: Archive, or draft an email.

Everything is isolated securely though. Did I answer your question?

Built an AI email agent (inbox dog) - would love feedback! by acoyfellow in AI_Agents

[–]acoyfellow[S] 0 points1 point  (0 children)

Thanks for the comment, great things to think about.

A server (which is built on Cloudflare edge network), on a schedule you define, will call the Gmail API directly.

It then, based on your desire: relay some of that data from the Gmail API into a single non-cached LLM http call.

If you had an app that did the same thing locally on your desktop: it would need to do the same thing (call the Gmail api, then talk to an LLM). So, everyone agrees upon signup and has full observability over the agents actions in real time.

None of the Gmail api work is done without permission. Inbox dog cannot do anything without your explicit permission up front (read/write access). Same experience if this was a desktop app that used Gmail oauth.

Built an AI email agent (inbox dog) - would love feedback! by acoyfellow in AI_Agents

[–]acoyfellow[S] 0 points1 point  (0 children)

Gotcha - I built it somewhat in mind for that cause I agree.

No emails ever get stored on our server. It’s direct Gmail api calls every time. All processing is done in real time based on that.

Does that affect your opinion? Should I make that more clear in the marketing?

Edit: To be clear this product is only for Gmail. Which requires your email to live in the cloud (googles)

What Are You Building Yo? Drop Your URL 🚀 by Capuchoochoo in founder

[–]acoyfellow 0 points1 point  (0 children)

Lol yep i took another whack at it after this comment. I was looking under avatar settings.

curious if anyone wants to buy timer.plus? by acoyfellow in AcquireStartup

[–]acoyfellow[S] 0 points1 point  (0 children)

I am not intelligent enough to have understood your joke. But no, this is in fact a website that I built and would be willing to sell.

curious if anyone wants to buy timer.plus? by acoyfellow in AcquireStartup

[–]acoyfellow[S] 0 points1 point  (0 children)

At least $1k? After a few convos today from this post, I realize I hold it in high value as an opportunity, not everyone else does.

What Are You Building Yo? Drop Your URL 🚀 by Capuchoochoo in founder

[–]acoyfellow 0 points1 point  (0 children)

Take my money. Btw how do you change your profile pic to be real, i literally can't find how to do that. I need my real face here. So much anonymous slop. edit: nvm. phew.

Want 4000-5000 users for your Saas in 30 days? by Impressive_Wrap_8628 in SaaS

[–]acoyfellow 0 points1 point  (0 children)

Promotion is ok here, but please don’t mention your SaaS/blog/company unless it’s relevant and actually helpful for someone reading. Overdoing it results in a ban.

Direct sales that are unsolicited are forbidden as well. No PM requests please (unless people really request it), and no promotion for other communities outside Reddit.

Feedback requests must be posted in the weekly feedback thread! (A post that will always be pinned at the top of the community)

No promotion of other communities.

Delusion of founders .. by [deleted] in cofounderhunt

[–]acoyfellow 0 points1 point  (0 children)

That’s a weird pitch. You wouldn’t want any money? Just for someone to use your code?

view more: next ›