Skip to main content
By default, Spinnable AI workers can receive messages from anyone who emails them at their @spinnable.app address or messages them on WhatsApp using the available WhatsApp channel. If you are using a worker for sensitive internal tasks — or want to prevent uninvited external people from contacting a sensitive worker — you can restrict who is allowed to reach each worker.

​
Restricting Worker Access

Access restrictions are configured per worker in the worker’s settings menu.
1

Navigate to worker settings

Open the worker you want to restrict, then select their name or the ⋮ menu in the chat header.
2

Open Security and privacy

Select Security and privacy in worker settings. Only the worker’s manager or co-managers can change these controls.
3

Choose who can message the worker

Set the controls separately for Email and WhatsApp:
  • Workspace — Live non-Guest workspace members can message the worker; Guests need access to that worker through a team or another explicit grant.
  • Specific senders or Specific numbers — In Workspace mode, allow selected outside email addresses, email domains, or phone numbers.
  • Anyone — Any outside address or number can message the worker. The specific-sender list is kept but isn’t used in this mode.
  • Managers only — Turn off Workspace and Anyone. Only the worker’s manager and co-managers can message it; the outside-sender list isn’t used. Changes apply as you make them; there is no separate Save step.

​
Understanding Workspace access

With Workspace enabled, live non-Guest members of the workspace can email or WhatsApp the worker without a shared team. A Guest needs access to that worker, such as through a shared team or an explicit grant. Managers and co-managers remain allowed.
A matching email domain does not by itself make someone a workspace member. The person must join the workspace, or their address or domain must be explicitly allowed under Specific senders. An allowed outside sender is still an outside contact; the list doesn’t grant workspace or tool permissions.
To let a colleague communicate with the worker:
  1. Under Settings > Workspace > Members, invite them if necessary. A non-Guest member can message the worker when Workspace is enabled.
  2. For a Guest, grant access to the worker, for example by adding them to a shared team under Settings > Workspace > Teams. See Teams.
  3. For an outside contact who isn’t joining the workspace, add their email address, email domain, or phone number in the worker’s Security and privacy settings while Workspace is enabled.

​
What Happens When a Message Is Blocked?

When an unauthorized user attempts to message a restricted worker:
  • Email: The sender receives an automated bounce message explaining that the worker isn’t available to them.
  • WhatsApp: The sender receives a brief reply indicating the worker is not accessible to external contacts.
  • Quota impact: Blocked messages do not consume your workspace’s outbound allowance.

​
Summary of Restriction Levels

Teams

Manage workspace teams and worker sharing

Understanding Usage Limits

Learn how external messages are counted and capped