> ## Documentation Index > Fetch the complete documentation index at: https://docs.summerengine.com/llms.txt > Use this file to discover all available pages before exploring further. # Summer Apps security > What a Summer App can and cannot do: a separate sandboxed site, no cookies or network, declared permissions, calls that run as the person, engine limits, spending limits and switches. **Draft.** Summer Apps is in a closed test. This page goes live after the end-to-end test on production. Agents write app code, so Summer does not trust it. Safety comes from how apps run, not from pop-ups. | Risk | What Summer does | | - | - | | An app tries to act as you on summerengine.com | App code is served only from `apps.summerengine.app`, a different site, inside a sandbox (`allow-scripts allow-forms allow-popups allow-modals allow-downloads`, never `allow-same-origin`) with no cookies, no storage and no access to Summer's pages. It can only ask the Studio page that hosts it, over one private channel. | | An app sends your data somewhere | Apps have no network access. A team admin can allow specific domains for their team's apps. | | An app does more than it says | Every call is checked against the permissions in its [manifest](/apps/manifest), twice: in Studio and on Summer's servers. | | An app reads another team's data | Every call runs as the person using the app, with their team membership. People outside the team get "not found". | | An app damages your project (engine access comes with the next Summer Engine update) | Only an allowlist of editor operations, only declared files, no scripts or shell, no deletes. Enforced by Summer and inside Summer Engine. | | An app spends your credits | Paid calls are charged to the person using the app and shown in the app's cost meter. Members have a daily spending limit per app that owners and admins can change. | | A bad app is shared in a team | Apps are shared only inside a team. Owners and admins can turn off one app or all apps for the team. | | Someone frames an app elsewhere | App pages can only be shown inside Summer Studio. | | An agent's look at an app changes something | `summer_app_screenshot` renders the app read-only: writes and paid calls are refused, events and notices are not delivered. | | An app's files are changed | Every published version is immutable, and every file is checked against its recorded hash when it is served. | Buttons inside an app that delete, publish, pay or send are pressed only by a person, never by an agent through `summer_app_page`. This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.