![[Sponsor] WorkOS: Let Agents Use Your Tools Without Giving Them Free Rein](https://dotcom.workos.com/airlock/opengraph-image-1j85j7.jpg?opengraph-image.0hh0q4k2crkt2.jpg?dpl=d1ed09ce0640b0d4fac667f8e64de1051ac6e964)
Manual approval
Safe, until you stop reading the prompts you're approving.
Airlock
Airlock is the missing authorization layer for agentic software. Every call an agent makes is evaluated against its intent and then allowed, denied, or sent to a human.
Least privilege requires hard-coding permissions. An agent's job is unknown until runtime, so teams settle for one of two extremes.
Fast, until the agent does something you can't undo.
With Airlock, you don't have to compromise.
No roles to assign, no scopes to pre-grant. Airlock authorizes agent access to all of your tools and integrations.
The task defines what the agent is allowed to do.
“Find last month's duplicate charges and refund them.”
The agent calls your tools and integrations as it works.
search · charges, last 30 days
refund · $1,240 in duplicate fees
delete · customer record
Every call is judged against the intent and your rules.
Static rules set fixed limits on your integrations. Runtime rules judge what static rules can't. What should agents be allowed to do?
Agents can read repos, review code, and comment on PRs.
They can merge a PR when CI is passing, it has an approved review, and the change is small in scope.
Anything touching auth, billing, or migrations needs sign-off from the code owner.
Never push to main directly, and never delete branches.
Static Policies Always in effect
Runtime Checks
Judged per call
Check the PR first: CI must pass, has a review, and the diff is small.
Must be less than 200 lines and edit minimal files within a single domain.
Changes touching auth, billing, or migrations must be approved by the code owner.
Use Airlock to manage authorization for all your agents in one place, wherever they run. Airlock connects coding agents, custom harnesses, and AI teammates to every tool they need, without changing how they operate.
Policies live in one place and apply to every agent, on every team. Change a rule once and it takes effect across the organization.
Every request and every verdict is logged, so security has a complete record of what agents actually do.
Airlock is available in early access. Request access and tell us what you're building.