Squidbrake

Calls per hour

Top tools

click to filter

Chains

People and agents

Each person and each AI agent gets its own key. People can open this dashboard; approvers can approve held actions; admins manage the team and settings. Agents can only ask permission and report what they did. Roles such as finance let rules require a specific team to approve.

Setting this up for a team? Tell us about your team and we'll help with rules, approvers and rolling it out, or book 15 minutes with the founder.

Name	Type	Access	Roles	Added

Approvals by person

Approver	Approved	Rejected

Agents

stop a single agent without touching the others

Agent	Actions	Blocked	Held	Approved	Rejected	Failed	Last seen

Blocked by rules

Rule	Why	Times

Most used tools

Tool	Calls

Audit trail

every decision, change and export, newest first

When	Who	What	Details

Notifications

When an agent needs approval, the gateway can ping you on your phone and in Slack. Each message has a secure one-tap link to approve or reject that one action; the link stops working once it's decided.

Public address of this gateway Links in notifications point here, so it must open from your phone (your cloud URL or tunnel link). Phone notifications (free ntfy app) Install “ntfy” from the App Store / Google Play, tap +, and subscribe to this private topic name. Anyone who knows the topic can see the notifications, so keep it random. Slack or Discord incoming webhook Paste a Slack or Discord webhook URL. Discord formatting is detected automatically. Leave empty to turn off.

Approve and Reject right in Slack (buttons)

Set the public address above first: Slack sends each click there.
Create a Slack app → From a manifest → pick your workspace → paste this:
Install it to your workspace and pick the channel for approvals. Paste the webhook URL it gives you above.
From the app's Basic Information page, copy the Signing Secret here:

Slack app signing secret

One-tap links approve as Whoever can see the notification can use its link, so pick the person who owns that phone / channel. Post a weekly summary to Slack (Mondays 9:00) Second-person approval: nobody approves what their own agent asked for Set who each agent works for in Team. Approvals then always come from someone else, which is what auditors look for. Rolling it out to a team? We'll help.

Customers

Agents copy what they read: a ticket's customer ends up in a pull request description or a public issue. When an agent puts text where others can read it (a PR, an issue or comment, a gist, a chat post) and it names a customer on this list, it waits for a person. Card numbers, social security numbers, IBANs and lists of people's emails or phone numbers are held there too, with no list needed.

Agents that connect by URL

MCP

ChatGPT and claude.ai connectors, Devin, n8n and other cloud agents use MCP servers by URL. Add the app's MCP server here and give the agent its Squidbrake URL instead: every call is checked like any other and recorded as the agent that made it.

Name	URL for your agents	The app's server	Status

The agent signs in with one of its keys (Team, add an AI agent): Authorization: Bearer gw_…. If the app only takes a URL, add ?key=gw_… to it, and treat that URL like a password.

Rules

What agents may do is decided by rules.yaml on the gateway: allow, block, or hold for a person (optionally a specific role). Edits apply within seconds. Use Test a rule to check what would happen.

`j`	Select the next waiting request (nothing is selected until you choose)
`k`	Previous waiting request
`a`	Approve the selected request: press `a` twice within 3 seconds
`r`	Reject: focus the note field, then press Enter to reject (Esc to cancel)
`?`	Show this list