# NoRoles – run a company of people and AI agents on permissions > Source: > Published: 2026-09-28 17:34:47+00:00 **Run a company of people and AI agents on permissions instead of roles.** [https://noroles.com](https://noroles.com) Agents now write, build, sell and pay. Companies still run on titles, managers and approvals, so the work waits. NoRoles replaces the org chart with one open list: who can say yes to the few actions that can't be undone (money leaving, contracts, public words, personal data). Everything else, anyone just does. An agent acts with exactly its person's permissions, never more. ``` npx noroles init my-company ``` | [`MANIFESTO.md`](https://github.com/noroles/NoRoles/blob/main/MANIFESTO.md) | eighteen principles: how we think and work | | [`SPEC.md`](https://github.com/noroles/NoRoles/blob/main/SPEC.md) | the model: permissions, mandates, rules, eight laws, and what the orchestrator must enforce | | [`npm/`](https://github.com/noroles/NoRoles/blob/main/npm) | the `noroles` command line: start a company, ask for a yes, sign it, run agents with only the keys their mandate allows | ``` noroles open first-website # the holders say yes to a mandate once noroles ask --as me-agent --mandate first-website --permission money.spend \ --summary "buy example.com for 1 year" --amount 12 --currency USD --to Namecheap noroles yes # a person, in a terminal, sees the exact action and signs noroles do # runs the approved command once, with only its own key noroles run first-website --as me-agent -- claude noroles mcp-config first-website --as me-agent > .mcp.json # every tool call goes through NoRoles ``` See [`npm/README.md`](https://github.com/noroles/NoRoles/blob/main/npm/README.md) for what the code enforces today and what it does not yet. Issues and pull requests are welcome. Every change to how approvals work needs a test in `npm/test/laws.test.js` that names the law or attack it covers. MIT licensed.