Never give an autonomous AI agent unrestricted email API credentials

import { SadaSend } from 'sadasend';

// Initialize with a restricted agent key
// Configured with: 50 sends/hr ceiling, allowedDomain: 'acme-corp.com'
const agentClient = new SadaSend(process.env.SADASEND_AGENT_KEY!);

export async function executeAgentEmailTask(task: { to: string; subject: string; body: string }) {
  try {
    const result = await agentClient.emails.send({
      from: 'assistant@acme-corp.com',
      to: task.to,
      subject: task.subject,
      html: `<p>${task.body}</p>`,
      tags: ['ai-agent', 'customer-support-task']
    });
    return { status: 'delivered', id: result.id };
  } catch (error: any) {
    // If the agent attempts to email an unauthorized domain or breaches velocity:
    // Throws RecipientNotAllowlistedError or VelocityLimitExceededError
    console.error('Agent security gate tripped:', error.code, error.message);
    throw error;
  }
}