Agent Approve

AI Agent Observability & Control on Your Wrist

You're racing to ship. If your agents are idle, you're not gonna make it. Every pending approval is wasted time. So you're chained to your laptop, all day and night. This isn't the AI future we were promised -- go out and enjoy life.

Agent Approve brings observability and control to your wrist: track AI agent activity, protect yourself with policy, and approve with a tap wherever life takes you.

How It Works

Agent Approve works with the hooks already built into your agent and coding tools, so you don't have to change how you work.

When an agent goes to run a command or call a tool, it's encrypted on your machine and sent through our cloud relay, where it's evaluated against policy. Compound commands are separated to catch hidden destructive commands.

Matches to your deny list or allow list are handled immediately. Those that need review are pushed to your iPhone or Apple Watch. When it reaches you, you see the full command, tap approve or deny, and can add it to your allow or deny list so you're never asked again. Everything is end-to-end encrypted: you own your data and keys.

Why It Matters

Some commands have no undo. Agents have wiped production databases, deleted home directories, and force-pushed away weeks of work -- usually in seconds, while no one was watching.

And the agents you can't see are the ones that bite: a scheduled task that drifts, a retry loop that burns thousands in tokens overnight, or a helpful agent sharing secrets with a bad actor.

Agent Approve ships with a Restrictive policy that blocks 250+ destructive commands out of the box, a Permissive policy that auto-approves common safe commands, and you can always build your own.

Everything You Need To Stay In Control

• Approve from your wrist or phone - one tap, wherever you are.
• Centralized policy - allow, deny, or ask, with 250+ destructive patterns blocked out of the box.
• Compound-command parsing - catches dangerous commands hidden inside scripted command sequences.
• Full observability - every command, tool call, and action in one live feed, including subagents and agent profiles.
• Readable at a glance - commands, plans, and tool payloads render as formatted markdown and JSON, not a wall of raw text.
• Interactive Q&A - review agent plans and answer supported agent questions from your phone.
• Completion alerts and follow-ups - know the moment an agent finishes, then send its next move by voice or quick reply.
• Privacy tiers and retention - choose how much of each command is stored and how long to keep it.
• End-to-end encryption - you own your data and keys, with optional key rotation for forward secrecy.

Works With Every Agent You Use

Agent Approve runs on the hooks already native to your coding tools. Where there isn't one, we ship a plugin. Fourteen agents and counting, including Antigravity, Hermes, Pi, OpenClaw, OpenCode, OpenHands, Claude Code, Cursor, Codex, Windsurf, VS Code Copilot, and GitHub Copilot CLI.

It's the only cross-platform AI agent observability and control layer on your wrist.

Try Before You Commit

Tap Try Demo on the welcome screen in the iOS app to explore the full approval flow with sample data -- no account or agent required.

To try with your own agents, run npx agentapprove on your computer. It installs the hooks or plugins for the agents you select and walks you through pairing: scan the QR code, start the 7-day free trial, and let your agents keep moving.

Important

• A valid Agent Approve subscription is required to use this package.
• You must download the iOS app, run npx agentapprove, and pair your device.
• This package is currently pre-launch software. Public App Store availability is not open yet.
• If a valid token is not configured, approval hooks will block and show setup guidance.

Installation

npx agentapprove

Or install globally:

npm install -g agentapprove
agentapprove

Usage

agentapprove              # Install wizard (default)
agentapprove status       # Show configuration
agentapprove profiles     # Install/remove across Hermes profiles
agentapprove pair         # Pair with a new iOS device
agentapprove refresh      # Refresh token and hooks
agentapprove disable      # Temporarily disable hooks
agentapprove enable       # Re-enable hooks
agentapprove uninstall    # Remove hooks
agentapprove restore      # Restore from backup
agentapprove help         # Show help

Hermes profiles

Hermes profiles are isolated instances — each has its own plugins and config — so Agent Approve must be installed into each profile you want governed. Run:

agentapprove profiles

to see every profile and its current Agent Approve status, then check the profiles it should govern (your current set is pre-selected). The command installs into newly-checked profiles, updates any selected profile that is on an older version, and removes it from unchecked ones. Run it again any time you add a profile or upgrade the installer. agentapprove uninstall removes the plugin from all profiles.

Options

agentapprove --no-e2e          # Skip end-to-end encryption setup

Supported AI Agents

• Antigravity - Google's current agent app/IDE
• Antigravity CLI - Google's current terminal agent
• Claude Code - Anthropic's CLI for Claude
• Cursor - AI code editor
• Gemini CLI (legacy) - retained for existing Gemini CLI installations
• GitHub Copilot CLI - GitHub's coding agent
• Hermes - Nous Research's agent runtime, including profile-aware installs
• OpenAI Codex - OpenAI coding agent
• OpenClaw - Open-source AI agent platform
• OpenCode - Open-source AI coding agent
• OpenHands - Open-source autonomous software engineering agent
• Pi - Package-based agent extension
• VS Code GitHub Copilot - VS Code agent hooks
• Windsurf - Cascade hooks for Windsurf

Installer Features

• Privacy tiers - Choose minimal, summary, or full data logging
• Data retention - Control how long event history is stored (1-365 days)
• QR code pairing - Scan to pair your iOS device
• macOS Keychain - Token stored securely in Keychain on macOS
• Automatic backups - Timestamped backups of all modified config files
• Hook preservation - Updates only Agent Approve hooks, preserves your other hooks
• Debug logging - Optional verbose logging to ~/.agentapprove/hook-debug.log
• System dependency checking - Validates and optionally installs required tools
• Cross-platform - macOS, Linux, and Windows (via Git Bash)

Requirements

• Node.js 18+
• macOS, Linux, or Windows (with Git Bash / Git for Windows)
• System tools: curl, jq, openssl (included with Git Bash on Windows)
• Agent Approve iOS app and active subscription ($14.99/month, 7-day free trial)

Links

• Website
• iOS App

License

Proprietary. Copyright (c) 2026 Agent Approve LLC. All rights reserved.