{"slug": "sponsor-workos-let-agents-use-your-tools-without-giving-them-free-rein", "title": "[Sponsor] WorkOS: Let Agents Use Your Tools Without Giving Them Free Rein", "summary": "WorkOS released Airlock, an authorization layer for agentic software, in early access. Airlock evaluates every agent tool call against the agent's runtime intent and then allows, denies, or routes it to a human, replacing pre-granted roles and scopes with static policies plus per-call runtime checks. WorkOS says policies live in one place and apply across every agent and team, with every request and verdict logged for security review.", "body_md": "### Manual approval\n\nSafe, until you stop reading the prompts you're approving.\n\nAirlock\n\nAirlock is the missing authorization layer for agentic software. Every call an agent makes is evaluated against its intent and then allowed, denied, or sent to a human.\n\nLeast privilege requires hard-coding permissions. An agent's job is unknown until runtime, so teams settle for one of two extremes.\n\nFast, until the agent does something you can't undo.\n\nWith Airlock, you don't have to compromise.\n\nNo roles to assign, no scopes to pre-grant. Airlock authorizes agent access to all of your tools and integrations.\n\nThe task defines what the agent is allowed to do.\n\n“Find last month's duplicate charges and refund them.”\n\nThe agent calls your tools and integrations as it works.\n\nsearch · charges, last 30 days\n\nrefund · $1,240 in duplicate fees\n\ndelete · customer record\n\nEvery call is judged against the intent and your rules.\n\nStatic rules set fixed limits on your integrations. Runtime rules judge what static rules can't.\n\nWhat should agents be allowed to do?\n\nAgents can read repos, review code, and comment on PRs.\n\nThey can merge a PR when CI is passing, it has an approved review, and the change is small in scope.\n\nAnything touching auth, billing, or migrations needs sign-off from the code owner.\n\nNever push to main directly, and never delete branches.\n\nStatic Policies\n\nAlways in effect\n\nRuntime Checks\n\nJudged per call\n\nCheck the PR first: CI must pass, has a review, and the diff is small.\n\nMust be less than 200 lines and edit minimal files within a single domain.\n\nChanges touching auth, billing, or migrations must be approved by the code owner.\n\nUse Airlock to manage authorization for all your agents in one place, wherever they run.\n\nAirlock connects coding agents, custom harnesses, and AI teammates to every tool they need, without changing how they operate.\n\nPolicies live in one place and apply to every agent, on every team. Change a rule once and it takes effect across the organization.\n\nEvery request and every verdict is logged, so security has a complete record of what agents actually do.\n\nAirlock is available in early access. Request access and tell us what you're building.", "url": "https://wpnews.pro/news/sponsor-workos-let-agents-use-your-tools-without-giving-them-free-rein", "canonical_source": "https://www.workos.com/airlock?utm_source=daringfireball&utm_medium=newsletter&utm_campaign=q42026", "published_at": "2026-11-10 04:14:31+00:00", "updated_at": "2026-11-10 04:20:36.881834+00:00", "lang": "en", "topics": ["ai-agents", "ai-safety", "ai-tools", "developer-tools"], "entities": ["WorkOS", "Airlock"], "also_reported_by": [], "alternates": {"html": "https://wpnews.pro/news/sponsor-workos-let-agents-use-your-tools-without-giving-them-free-rein", "markdown": "https://wpnews.pro/news/sponsor-workos-let-agents-use-your-tools-without-giving-them-free-rein.md", "text": "https://wpnews.pro/news/sponsor-workos-let-agents-use-your-tools-without-giving-them-free-rein.txt", "jsonld": "https://wpnews.pro/news/sponsor-workos-let-agents-use-your-tools-without-giving-them-free-rein.jsonld"}}