Agents are dynamic. Permissions are static.

Least privilege requires hard-coding permissions. An agent's job is unknown until runtime, so teams settle for one of two extremes.

Manual approval

Safe, until you stop reading the prompts you're approving.

YOLO mode

Fast, until the agent does something you can't undo.

With Airlock, you don't have to compromise.

Airlock derivespermissions from intent.

No roles to assign, no scopes to pre-grant. Airlock authorizes agent access to all of your tools and integrations.

01

Intent

The task defines what the agent is allowed to do.

“Find last month's duplicate charges and refund them.”

02

Actions

The agent calls your tools and integrations as it works.

search · charges, last 30 days

refund · $1,240 in duplicate fees

delete · customer record

03

Verdicts

Every call is judged against the intent and your rules.

Allowedsearch is read-only

Needs approvalmoves money

Deniedoutside the intent

Write rules in natural language.…