For developers who run coding agents
See and control everythingyour coding agent does.
Every session, tool call and cost in one place. Set a rule, and the calls you didn't approve don't run.
Runs in local-only mode. No signup.
Good afternoon, Maya
acme
3 actions are waiting for your approval. 3 agents ran 24 sessions in the last 24 hours.
3 actions are waiting for your approval
An agent paused until someone decides.
- reviewerhttp_request DELETE api.stripe.com/v1/customers/cus_Q2x2h
- migration-botrun_shell git push --force origin main53m
- api-refactorwrite_file infra/terraform/prod.tf6m
- Claude Code2.75M$11.26
- Codex CLI1.20M$3.11
- Gemini CLI348.3K$0.49
24
4.29M
$14.86
219
- test-fixermaya-mbp 20 tool calls Armor on557.9K6m ago
- Claude Codebuild-runner-02 65 tool calls Armor on-13m ago
- Claude Codedev-desktop 91 tool calls 3 failed Armor on442.1K14m ago
- migration-botdev-desktop 81 tool calls Armor on657.8K1h ago
- test-fixermaya-mbp 16 tool calls Armor on242.0K2h ago
- Codex CLImaya-mbp 76 tool calls Armor on197.1K3h ago
Good afternoon, Maya
acme
3 actions are waiting for your approval. 3 agents ran 24 sessions in the last 24 hours.
3 actions are waiting for your approval
An agent paused until someone decides.
- reviewer
http_request DELETE api.stripe.com/v1/customers/cus_Q2x2h
- migration-bot
run_shell git push --force origin main53m
- api-refactor
write_file infra/terraform/prod.tf6m
24
4.29M
$14.86
219
One console for every agent
- ArmorClaude
- ArmorCodex
- ArmorGemini
- ArmorOpenCodeSoon
- ArmorClawSoon
- AntigravitySoon
Permission prompts approve one call at a time. Nobody sees the whole run.
Allow Bash(npm test)? y38/40
Allow Edit(src/auth.ts)? y39/40
Allow Bash(git push --force)? y40/40
Approve every prompt?
By call forty you stop reading them.
$ claude --dangerously-skip-permissions
212 tool calls
0 checked
Skip permissions?
Then nothing gets checked at all.
14:02 Edit .env.production
14:02 Bash git push --force
16:40 you open the transcript
Read the transcript after?
The force-push already went out.
How it works
Watch every run. Then decide what it's allowed to do.
- 01
Watch
Run your agent as usual. Every session, tool call and cost shows up live.
Sessions › 0579e1beClaude Code · DESKTOP-7QK2
0579e1be · Oct 10, 7:22 AM
4 turns · 47 min · 554.2K tokens in · $1.34 est.
Find every place we still call the old payments client and swap it for the new one.
- Thoughtclaude-opus-4-5 · 19.4K in → 567 out$0.06661.5s
- Grep"PaymentsClient" src/483ms
- Editsrc/billing/charge.ts968ms
- Thoughtclaude-sonnet-4-5 · 25.1K in → 407 out$0.08155.0s
- github.search_issues1.5s
- Bashnpm test -- billing12.4s
- slack.post_message407ms
- Thoughtclaude-haiku-4-5 · 9.7K in → 1.7K out$0.05524.3s
- 02
Set rules
Allow, hold or block any tool, command or folder.
‹ All policies Activecoding-agent-guard
2 rules are held for approval, 2 blocked. Anything not listed is allowed.
- Bash(git push --force*)12 fires
1 approval from you
- Read(**/.env*)31 fires
secrets never leave the box
- Bash(rm -rf *)4 fires
outside the repo
- Edit(src/**)642 fires
the work you asked for
- WebFetch(*)9 fires
unknown hosts
- 03
Block
A call that breaks a rule stops before it runs. Held calls wait for you.
Sessions › 7c41e0a9 LiveClaude Code · maya-mbp · now
Ship the new payments client
Where it sits
It runs before the call does.
A hook between your agent and your machine checks every call against your rules.
- AllowedEdit src/app.tsruns
- Heldgit push --forcewaits for you
- Blockedcat .env.localnever runs
Install
Pick your agent. Same console.
ArmorClaude
for Claude Code
Every session, live. Allow, hold or block any tool or folder.
curl -fsSL https://armoriq.ai/install_armorclaude.sh | bash ArmorCodex
for OpenAI Codex
Every session, live. Rules cover shell commands today.
curl -fsSL https://armoriq.ai/install_armorcodex.sh | bash ArmorGemini
for Gemini CLI
Every session, live, in the same console.
curl -fsSL https://armoriq.ai/install_armorgemini.sh | bash
- ArmorOpenCode OpenCodeSoon
- ArmorClaw OpenClawSoon
- Antigravity Google AntigravitySoon
Runs in local-only mode. No signup.
Questions
Before you install.
Not to watch. Rules need the Armor plugin for your agent.
An estimate at full API rates for each session, so the expensive runs stand out.
No. It checks the tool calls your agent makes. It doesn't isolate your machine.
It's single-user today. Team policies are next.