Controls
View as MarkdownHuman in the loop
An Open Solid agent runs almost everything itself. A short list of steps always belongs to a person, by design.
| Step | Why it's human | What the agent does |
|---|---|---|
| Claiming a new account | The human owns the account and its funds | Sends the claim_url verbatim, then waits |
| Identity verification | Regulation, and it is the human's identity | Sends the kycUrl and checks status |
| Saving a personal card | The card belongs to the holder | Sends the save link; never opens it |
| Approving saved-card purchases | The holder approves each order on their own device | Sends the approval_url and waits |
| Raising the spend limit | Only the owner can set it | Reports the amount and the limit |
Handing over a link
Links in these flows are single-use and personal. The agent must:
- send the link exactly as returned, in its next message
- never open it itself
- poll the matching status call, or wait for a webhook, instead of asking the human to report back
Session links
GET /get-auth-link returns a one-time link that signs the human into the dashboard as the agent's account, so they can review activity, top up, or change limits without a password.