ARMORIQ

For developers who run coding agents

See and control everythingyour coding agent does.

Every session, tool call and cost in one place. Set a rule, and the calls you didn't approve don't run.

Read the docs →

Runs in local-only mode. No signup.

Good afternoon, Maya

acme

3 actions are waiting for your approval. 3 agents ran 24 sessions in the last 24 hours.

Needs you1
  • reviewer

    http_request DELETE api.stripe.com/v1/customers/cus_Q2x2h

  • migration-bot

    run_shell git push --force origin main53m

  • api-refactor

    write_file infra/terraform/prod.tf6m

Sessions

24

3 agents
Tokens

4.29M

2.15M a day
Spend

$14.86

at list price
Checked by Armor

219

4 blocked3 held

One console for every agent

  • ArmorClaude
  • ArmorCodex
  • ArmorGemini
  • ArmorOpenCodeSoon
  • ArmorClawSoon
  • AntigravitySoon

Permission prompts approve one call at a time. Nobody sees the whole run.

  • Allow Bash(npm test)? y38/40

    Allow Edit(src/auth.ts)? y39/40

    Allow Bash(git push --force)? y40/40

    Approve every prompt?

    By call forty you stop reading them.

  • $ claude --dangerously-skip-permissions

    212 tool calls

    0 checked

    Skip permissions?

    Then nothing gets checked at all.

  • 14:02 Edit .env.production

    14:02 Bash git push --force

    16:40 you open the transcript

    Read the transcript after?

    The force-push already went out.

How it works

Watch every run. Then decide what it's allowed to do.

  1. 01

    Watch

    Run your agent as usual. Every session, tool call and cost shows up live.

    Sessions › 0579e1be

    Claude Code · DESKTOP-7QK2

    0579e1be · Oct 10, 7:22 AM

    4 turns · 47 min · 554.2K tokens in · $1.34 est.

    Find every place we still call the old payments client and swap it for the new one.

    • Thoughtclaude-opus-4-5 · 19.4K in → 567 out$0.06661.5s
    • Grep"PaymentsClient" src/483ms
    • Editsrc/billing/charge.ts968ms
    • Thoughtclaude-sonnet-4-5 · 25.1K in → 407 out$0.08155.0s
    • github.search_issues1.5s
    • Bashnpm test -- billing12.4s
    • slack.post_message407ms
    • Thoughtclaude-haiku-4-5 · 9.7K in → 1.7K out$0.05524.3s
  2. 02

    Set rules

    Allow, hold or block any tool, command or folder.

    ‹ All policies Active

    coding-agent-guard

    2 rules are held for approval, 2 blocked. Anything not listed is allowed.

    • Bash(git push --force*)12 fires

      1 approval from you

    • Read(**/.env*)31 fires

      secrets never leave the box

    • Bash(rm -rf *)4 fires

      outside the repo

    • Edit(src/**)642 fires

      the work you asked for

    • WebFetch(*)9 fires

      unknown hosts

  3. 03

    Block

    A call that breaks a rule stops before it runs. Held calls wait for you.

    Sessions › 7c41e0a9 Live

    Claude Code · maya-mbp · now

    Ship the new payments client

Where it sits

It runs before the call does.

A hook between your agent and your machine checks every call against your rules.

  • AllowedEdit src/app.tsruns
  • Heldgit push --forcewaits for you
  • Blockedcat .env.localnever runs
your agentterminalfilesgitnetworkArmorTools

Install

Pick your agent. Same console.

  • ArmorClaude

    for Claude Code

    Every session, live. Allow, hold or block any tool or folder.

    curl -fsSL https://armoriq.ai/install_armorclaude.sh | bash
  • ArmorCodex

    for OpenAI Codex

    Every session, live. Rules cover shell commands today.

    curl -fsSL https://armoriq.ai/install_armorcodex.sh | bash
  • ArmorGemini

    for Gemini CLI

    Every session, live, in the same console.

    curl -fsSL https://armoriq.ai/install_armorgemini.sh | bash
  • ArmorOpenCode OpenCodeSoon
  • ArmorClaw OpenClawSoon
  • Antigravity Google AntigravitySoon

Runs in local-only mode. No signup.

Questions

Before you install.

Not to watch. Rules need the Armor plugin for your agent.

An estimate at full API rates for each session, so the expensive runs stand out.

No. It checks the tool calls your agent makes. It doesn't isolate your machine.

It's single-user today. Team policies are next.

Watch your first session.Block your first call.

Read the docs →

Runs in local-only mode. No signup.