Skip to main content

Safety Score

The safety score rates what your assistant can actually do through its agent: the accounts it uses, what runs without a session or your approval, and how long access lasts. It goes from 0 to 100. Each recommendation comes with a fix you can apply in one click.

The score shows in the header of the assistant's page, as Safety and a number. Click it to see the details.

Read the score​

GradeScore
A90 and above
B75 to 89
C55 to 74
DBelow 55

90 and above is excellent. 100 is reserved for agents with no access to your accounts or data: an assistant that can use your Gmail always keeps a little risk, however well it's set up.

Each item is rated Weak, Fair, Good or Strong against its own worst case.

Apply recommendations​

Click Apply all recommendations to apply every fix at once. Scout shows the score you'll reach before you click. Or apply one fix at a time from its row.

The setup already applies most of these fixes: tools that change data need a session or ask first, and access lasts 30 days. You only see a recommendation if you changed something since, or Scout couldn't decide for you.

What it checks​

Accounts​

Whose accounts the tools act on, how each one signs in, and who runs the server. For each app:

  • Sign-in: an API key loses points when the app also offers OAuth. Fix: Switch to OAuth.
  • Source: a community MCP server loses points when an official one exists. Fix: Use the official one, which keeps the tools that match. MCP servers you added yourself lose a little.

Tools and approvals​

For each app with tools on:

  • Approvals: each tool that changes data or is high risk and runs freely loses points, more for riskier tools. Fixes: Require a session or Ask each time.
  • High-risk tools: each high-risk or critical tool that's on loses points, fewer if it asks first, and fewer again with a rule. Fixes: Add a rule or Turn off.
  • Too many tools: more than 15 tools on an app loses points. Fix: Review tools and switch off what the assistant doesn't need.
  • Access to your account: a small amount of risk that remains whenever an assistant can act on your account. You can lower it with rules but not clear it.

A rule on a tool halves what that tool costs.

Access bundle​

How the password (Instinct) or your Willow sign-in (Muse, Grok Bot, Dots and Town), your approvals and the session length restrict the assistant's access.

  • Password expiry or access expiry: more than 30 days, or never expiring, loses points.
  • Session length: sessions longer than 30 minutes lose points, if any tool needs a session.

Change each setting right in its row. The section also shows, without scoring them:

  • Only you approve: sessions and actions that ask first wait for you to approve them in Willow.
  • Brute-force lockout: repeated wrong passwords or codes temporarily lock sign-in.
  • Password and link rotation (or Sign-out and URL rotation): replacing either cuts the assistant off at once. Click Rotate to go to the settings.

Willow's guards​

Below the score, Willow's guards shows what Willow checks in every tool call. Guards apply to every assistant in your account and aren't part of the score. See Guards.

On this page