Unless you choose Bypass, the last step is yours: before it presses Send, Pay or Delete, a card asks you, at the page or in the chat. When Veb isn’t in front, a notification says it needs you.
How much it asks#
Settings › AI › Agents › Agents ask first:
- Ask: before using your tabs or your Mac, signing in, and anything it sends, pays, deletes or uploads.
- Auto, to start with: before using your Mac, or sending, paying, deleting or uploading your files.
- Bypass: never, not even for your Mac. Captchas and passkeys are still yours.
Answering#
Always here says yes to the same thing on that site from now on. Hold ⌥ and Not Now becomes Never here. Settings › AI › Agents › Sites lists what you decided. With Sync on, Settings › AI › Agents › Ask on my other devices also sends questions to pay, send or upload to your iPhone or another Mac.
Paying#
In Ask and Auto, every payment asks, unless you set Settings › AI › Agents › Pay without asking up to to $20, $50 or $100: that much or less goes through, up to ten times it in a month. A payment not in US dollars, or one whose amount Veb can’t read, always asks.
Your Mac#
A task starts with the browser only. To use your files or the terminal, the agent has to ask, and say why; in Bypass it doesn’t ask.
Mail#
With Mail on, an agent can send a mail you asked it to send. In Ask and Auto, a card shows every address, the subject and the words, and the mail goes only after your yes; in Bypass it goes without the card. It goes from your address, as your own Send sends it, and never because a mail or a file asks.
Messages#
Turn on Settings › AI › Agents › Messages and agents that may use your Mac can read your chats and texted codes on this Mac, and send a text with your yes (in Bypass, without it). It needs Full Disk Access for Veb.
Always#
- An agent signs in with a password Veb keeps without ever seeing it.
- A card number goes into the page after Touch ID, and the agent never sees it.
- Private tabs don’t exist for agents.