One permission policy
for every AI agent.
Decide once which tools run on their own, which are blocked, and which need your tap. The policy follows your agents wherever they run, so you only hear about the actions that need you.
Featured on Hacker NewsThe policy makes the easy calls
A good policy decides most things on its own, so the few that reach your phone are the ones actually worth your judgment.
Auto-approve, deny, or ask
Each tool gets one of three answers: let it run, block it outright, or push it to your phone for a decision. You decide which tools fall where.
Approve by exception
Wave through the safe work, hard-block what should never run, and spend your attention only on the consequential middle. No more rubber-stamping every prompt.
Set it once, across every agent
The same policy applies whether the work runs in Claude Code, Codex, Cursor, or Hermes, so you are not keeping five different permission setups in your head.
A timeout you control
Decide what happens when an escalated action goes unanswered: keep waiting, deny by default, or fall back to the agent's own prompt.
Enforced where it can be
On agents with hooks, an action that needs approval is physically blocked until you answer. On plain MCP it is cooperative, meaning the agent chooses when to ask.
Every decision recorded
Each call the policy handles, auto-approved or escalated, is written to the audit trail, so you can see what the rules actually did.
Write the rules once.
Connect an agent and your policy is in force from the first command.
More control