Allow-list
Only user ids on the allow-list may talk to the bot. If the list is empty and REQUIRE_ALLOWLIST is true, everyone is refused.
Settings
ALLOWED_TELEGRAM_IDS, ALLOWED_DISCORD_IDS, REQUIRE_ALLOWLIST (default true).
Where it is checked
Both gateways check messages. Telegram also checks button presses.
Warning
Setting REQUIRE_ALLOWLIST to false lets anyone spend your model key and use your tools.
See also:Safety model
Checked against the source at commit f4fd89f on 29 Oct 2026. Everything here is merged on the main branch; no release has been tagged yet. The source is private, so these pages are the public description.