Token built Rehearsal, an AI agent that operates inside user browser sessions with full user permissions.

Because servers cannot distinguish human clicks from agent actions, the tool initially bypassed security rules by default, prompting Token to implement read-only limits and session recordings.

How the digital assistant works

The assistant, called Rehearsal, was designed to answer questions within Token's platform. Rather than simply giving instructions, it takes action on its own: opening browser tabs, setting filters, and filling out forms.

Because it runs within the user's session, it operates with the same permissions and access as the human being. Systems and computers cannot distinguish whether a click on the screen was made by the user or by the digital assistant.

The security measures implemented by the company

Because Token had control over both the assistant and the app, it was able to mitigate risks from within.…