The agent asks
It runs alicit run with a profile, a time limit and a justification. Nothing else changes in its workflow.
Private beta Credential approvals for AI agents
Your agents ask. You decide.
alicit puts your decision in front of every credential an agent uses. You see the exact operation on your phone, and Face ID or your fingerprint signs your answer.
Try it yourselfHow it works
One command. One decision.
The agent does not hold a standing token. It asks for the smallest profile it needs, for a short time, and it says why.
Your phone shows the request
You see the operation, its exact inputs and the reason. You approve it or decline it, and your phone signs your answer.
The credential stays sealed
The command gets a local proxy, not the real token. When the command stops, alicit revokes the token.
Try it
Your turn.
Approval requestednow
Open alicit to review.
Approve
Decline
Read
GitHub · alicit-ai
Hostbuild-mac
Repositoryalicit-ai/alicit
AgentClaude Code · 3f2a9c1e
Processgh
Path/v1/github/alicit-ai/token/issues
List the exact repository issues for the current implementation task
jev · clear
Reason fits 91% · Scope fits 80%
2m 0s
All caught up
A new request appears here when an Agent asks for a credential.
Released
Nothing released without you
Requests that a Policy releases on je valide's reading appear here.
History
No decisions yet
Requests you approve or decline appear here.
Up to 100 requests from the last seven days.
je valide
clearReason fits 91% · Scope fits 80%
DecisionApproved
Credential deliveryWritten to consumer · receipt unconfirmed
Requested
Profile
Signed in
Your approval key stays on this iPhone.
Releases a queue left checked out by an older app. It does not approve any request.
alicit 1.1.0 (397)
Requested from
Directory~/alicit
Repositoryalicit-ai/alicit
AgentClaude Code
Session3f2a9c1e
Request
MethodGET
/v1/github/alicit-ai/token/issues
Justification
List the exact repository issues for the current implementation task
je valide
Reason fits91%
Scope fits80%
Sign out of alicit?
alicit
Your credentials. Your decision.
Swipe right to approve
Swipe left to decline
Face ID signs every decision
All caught up
A new request appears here when an Agent asks for a credential.
Read
GitHub · alicit-ai
2m 0s
Justification
List the exact repository issues for the current implementation task
Fingerprint
3F9A 1C7E 52B0 D8A4
je valide
jev · clear
Asked twice, with and without your agent's own words
The stated reason matches the operation
Yes · 91% confidentAsked for more access than the work needs
No · 80% confidentRequested from
Directory~/alicit
Repositoryalicit-ai/alicit
AgentClaude Code
Session3f2a9c1e
Request
MethodGET
Path/v1/github/alicit-ai/token/issues
Trusted Hostbuild-mac
Processgh
Profilesgithub-issues
Fingerprint3F9A 1C7E 52B0 D8A4
Nothing released without you
Requests that a Policy releases on je valide's reading appear here.
No decisions yet
Requests you approve or decline appear here.
Up to 100 requests from the last seven days.
DecisionApproved
Credential deliveryWritten to consumer · receipt unconfirmed
Requested
je valide
Readingclear · Reason 91% · Scope 80%
Your approval key stays on this phone.
Notifications
Wakes are onA notification arrives for each new request.
Approvals
Diagnostics
Account
alicit 1.1.0
Sign out of alicit?
Requests stay waiting in the alicit Vault. Sign in again to answer them.
alicit
Your credentials. Your decision.
Review each requestSee which Agent asks, for what, and why, before any credential is released.
Your fingerprint signs every decisionA strong biometric unlocks the approval key for one signature at a time.
Keys never leave this phoneThe approval key lives in this phone's secure hardware. It cannot be copied or backed up.
Sign in as [email protected] to open your requests.
alicit
Approve this request?
Read from github/alicit-ai/token/issues.
Fingerprint 3F9A 1C7E 52B0 D8A4
Touch the fingerprint sensor
A simulation made from the real alicit iOS app and CLI text. The Android phone shows the design of the Android app, which is not released yet. The simulation does not connect to a Vault.
Principles
Small, short and signed.
The smallest profile
An agent asks for one server-owned profile, such as read access to one repository. It does not get a broad key that works everywhere.
The shortest time
Tokens last minutes, not months. Each time the agent needs a new credential, it asks again.
A key only your phone holds
The approval key lives in the Secure Enclave of your iPhone or the Android Keystore of your Android phone. The server checks the signature before it issues anything.
Built on OpenBao
alicit runs in front of an OpenBao vault that you control. Policy decides what an agent can request. You decide what it gets.
Let your agents work. Keep the keys.
alicit is in private beta. Ask us for an invitation.