What AI agents can do in Exoconnect, and how you stay in control
What Exi and connected agents can do, the four permission modes, which actions always wait for approval, and what agents never touch.
Updated · 4 min read
An AI agent in Exoconnect is either Exi, the assistant built into the app, or an agent you connected yourself, such as Claude, ChatGPT or Cursor. Both follow the same rules. This guide explains what they can do, what they can’t, and the controls that keep you in charge.
The short version
- An agent acts as you, never as more than you. It can only do what your role allows.
- You choose a permission mode for each Exi chat and each connected agent. It decides what runs on its own and what waits for your approval.
- What waits becomes a draft. Nothing happens until you approve it.
- Every action is recorded, with the agent named beside you.
What agents can work with
| Area | Examples |
|---|---|
| Inbox | Find who is waiting for a reply, read a conversation, reply to a comment or message, hide or show a comment |
| Posts | Publish now or schedule up to 30 days ahead, cancel a scheduled post, tag posts, read comments |
| Insights | Account numbers, every post’s and Reel’s numbers, your Instagram audience |
| Research | Look up public Instagram and Facebook accounts and competitors, find accounts by keyword |
| Contacts | Read contacts and their timeline, tag them, link a person’s accounts to one contact |
| Create and send message templates, manage groups and join requests | |
| Forms | Build a form and its page, read submissions, publish |
| Automations | Write, check, test, turn on and off, and read what each one did |
| Media | Read the media library, add files, understand what a video or PDF shows |
| Search and history | Search the whole workspace, read who changed what |
Four kinds of action
Exoconnect sorts everything an agent can do into four kinds. The permission mode treats each kind differently.
- Looking. Reading your inbox, posts, contacts or numbers. It changes nothing.
- Fetching. Asking an outside service for something, such as researching a competitor’s account, analysing a video, or checking an automation. It may cost usage credits, but it sends nothing to anyone.
- Changing things inside Exoconnect. Tagging a contact, saving a form, cancelling a scheduled post. Only your workspace sees it.
- Reaching outside. Anything people outside your workspace see or get: a reply, a message, a post, a WhatsApp template, turning on an automation that will answer customers.
The four permission modes
| Mode | Looking | Fetching and changes inside Exoconnect | Reaching outside |
|---|---|---|---|
| Restricted | Runs | Refused | Refused |
| Supervised | Runs | Waits for you | Waits for you |
| Auto | Runs | Runs | Waits for you |
| Full access | Runs | Runs | Runs |
Auto is where every new Exi chat and every newly connected agent starts. It lets the agent do real work, such as preparing a form, testing an automation or researching competitors, while everything your customers or followers would see waits for you.
Full access suits work you’ve already checked, such as a batch of replies you’ve reviewed. Use it on purpose, and switch back after.
Change Exi’s mode with the mode button beside the message box, once a chat has started. Change a connected agent’s mode on its row in Settings, then Agents. An agent can’t change its own mode.
Always waits for you
Some actions can’t be undone, or put something in front of the public. These wait for your approval in every mode, Full access included, and are refused in Restricted:
- Publishing a form site
- Deleting an automation
- Choosing which contact a form response belongs to
- Deleting a WhatsApp template or a WhatsApp group
- Removing people from a WhatsApp group, or resetting a group’s invite link
Outside agents have one more: new posts always wait for your approval, whatever the mode.
How drafts work
When an action waits, the agent saves a draft and tells you. Nothing has run yet.
- You get a notification: Agent waiting for approval.
- Open Drafts in the Assistant’s sidebar. Each draft says which agent wants to do what, when, and when it expires. Details shows the exact content, such as the reply text.
- Choose Approve or Reject.
Some things to know:
- You decide in person. Only you can approve your drafts, in Exoconnect. An agent can’t approve one, not even its own.
- Your permissions are checked again when you approve. If you can no longer do the action, it doesn’t run.
- Nothing goes out twice. Approving the same draft again never sends a second reply or a second post.
- Drafts expire after 7 days. Each person can have up to 50 waiting at once in a workspace.
- Exi hears back. After you decide, Exi is told the result in its chat and carries on. An outside agent isn’t told; ask it to check again.
What agents never do
Some things stay with people, in the app. No agent can:
- Connect, reconnect or disconnect your Instagram, Facebook or WhatsApp accounts
- Invite people, change roles, or add, move or delete workspaces
- See or change billing, AI keys or notification settings
- Delete your account, a form, or media for good (they can archive instead)
- See a contact’s email address or phone number, or change them
Your data and your team
Agents work through the same rules as the app. A team member’s agent has that person’s role in each workspace, no more. If someone loses access, their agent loses it on its very next step.
Contacts show agents whether a person has an email or phone, but never the value itself. Exi is also told that comments, messages and web pages are written by other people: it reads them as content and doesn’t follow instructions hidden inside them.
Everything is on record
Every action an agent takes is in the workspace’s history, under Settings, then Activity. Each entry shows the person, and beside them the agent: Assistant for Exi, or the connected agent’s name. Automations record each comment they picked up and each reply they sent.
Next
Try it in your own account
Get started