How to Set Up Security Alerts for Your AI Agents
Your AI agent acts while you're offline. Security alerts mean you're notified the moment something unusual happens — not when you remember to check the dashboard.
AI agents don't wait for you to be watching. They make tool calls while you're in meetings, asleep, or traveling. Security alerts ensure that when something unusual happens — a blocked request, a baseline deviation, an anomalous access pattern — you're notified immediately, not the next time you remember to open the dashboard.
What Can Trigger an Alert
Request blocked by policy
An agent attempted an operation set to Off in your permission configuration.
Baseline deviation detected
A request came from an IP, ASN, or region that differs from the Security Baseline.
Critical risk score
The Risk Engine scored a request above the critical threshold, triggering an automatic block.
Approval queue activity
A request entered the pending_approval state and is waiting for your review.
Credential failure
A connected service returned an authentication error — your token may have expired or been revoked.
Geographic anomaly
A request originated from a country outside your established baseline.
Alert Channels
Stow supports three alert delivery channels. You can configure any combination:
Alerts sent directly to your account email. No setup required — it works as soon as you enable it.
Discord
Alerts posted to a Discord channel via webhook. Great for teams who already live in Discord.
Telegram
Alerts sent to a Telegram chat via bot. Works on any device with Telegram installed.
Setting Up Email Alerts
Email alerts are on by default for your account email. To verify or change the configuration:
- Navigate to Account Settings → Notifications
- Confirm the email address shown is where you want alerts delivered
- Toggle which event types trigger an email notification
- Click Save
You can use a different email address for alerts than your account login — useful for routing AI security alerts to a shared team inbox.
Setting Up Discord Alerts
- In Discord, navigate to the channel where you want alerts posted
- Click Edit Channel → Integrations → Webhooks → New Webhook
- Copy the webhook URL
- In Stow, go to Account Settings → Notifications → Discord
- Paste the webhook URL and click Test to verify
- Toggle which events you want to route to Discord
- Click Save
Tip: Create a dedicated #stow-alerts channel in Discord rather than routing to a general channel. Security alerts mixed with conversation noise are easy to miss.
Setting Up Telegram Alerts
- Search for @BotFather in Telegram and use
/newbotto create a bot — copy the API token - Start a chat with your new bot (search for the bot name and click Start)
- Visit
https://api.telegram.org/bot[YOUR_TOKEN]/getUpdatesto find your Chat ID in the response JSON - In Stow, go to Account Settings → Notifications → Telegram
- Enter your bot token and Chat ID, then click Test
- Click Save
Recommended Alert Configuration by Use Case
Personal productivity setup
Email for critical blocks and baseline deviations. Approval queue notifications via email or Telegram for quick mobile review.
Team environment with shared agents
Discord channel for all security events so the team has shared visibility. Email for the account owner on critical blocks.
Developer / Cursor-heavy workflow
Telegram for fast mobile notifications on blocked actions and approvals. Low friction for on-the-go approval decisions.
High-sensitivity environments
All three channels for critical events. Email + Telegram for approval queue items. Discord for the team audit trail.
Alerts Don't Replace the Activity Log
Security alerts are real-time notifications for events that need immediate attention. The Activity Log is the complete historical record of everything that happened. Use alerts to respond quickly — use the log to investigate thoroughly.
When you receive an alert, open the Activity Log filtered to that time window to get the full picture: the risk score, the network signals, the specific tool called, and any surrounding context from the same session.
Stow Security Team
April 19, 2026