# Binding rules for AI agents: /agents.md

- Date: 2026-10-25
- Type: New
- Surface: Developer portal and CLI
- What you need to do: Nothing.
- Address: https://developers.rivr.io/changelog/2026-10-25-rules-for-ai-agents

/agents.md holds short, binding rules for an AI agent that integrates with Rivr: use the sandbox and only test identities, retry safely with an Idempotency-Key and the same order id, retry only when the error catalog says it helps, verify webhook signatures, never send a secret to the client, and where the documentation and the OpenAPI documents are. /llms.txt starts with the same rules, and the MCP server tells the assistant to read them before it writes code.