OK by me

Let your agents do more for you, by setting the boundaries right.

OK by me is your side of every AI agent: the facts it may read, the things it may do, and a receipt for everything it did. Agents ask. You answer on your phone. The vault does the rest, so the agent never holds your password, your card or your address.

Ask for early access See how it works
1 · Ask

Your agent, any agent that speaks MCP, asks for one thing: an address for a courier, a page from a site you're signed into, a payment of up to £42 to one shop.

2 · Allow

You read it as one sentence on your lock screen and tap Allow or Deny. Nothing moves until you do, unless you've said it may.

3 · Receipt

The vault carries it out as you, and writes down what it did, verbatim. Refusals too. You can check every line.

What it carries

FactsYour address, birthdate, sizes, projects, on shelves with a policy each. Agents can ask a yes/no question instead of taking the fact, or get a one-time link for a stranger that opens once.
MailAn alias made for one recipient, so nobody learns your real address. Mail you approve is sent in your name, from the alias, by the vault.
AccountsGoogle Calendar and more: the agent names an operation, you approve a sentence, the vault makes the call with a credential it keeps sealed.
SitesSign in to a site with your own hands, once. Agents read pages, or click and type where you allow it, through your session. They never see it.
MoneyOne approved purchase is one virtual card, capped at that amount, shown to the agent once. Every charge on it is decided live, and the card closes when spent.
PresenceNever. No agent can assert where you are on your behalf. Some things aren't grantable, by design.

The agent can't, not won't

A rule that lives in an agent's prompt loses to the agent's task. So the rules live on your side of the door, decided by what kind of thing is asked for, never by what the agent says it is. And every action the vault carries out is one the agent could not have taken alone.

21:36:13 charge_captured Test Merchant took 42.50 GBP from the card for Test Merchant (ending 0005) — Stripe's record 21:36:11 charge_approved Approved 42.50 GBP at Test Merchant on the card for Test Merchant 21:25:56 charge_declined Declined 50.00 GBP at Test Merchant: more than the cap 21:21:50 card_issued Muse received a single-use card ending 0005, capped at 42.50 GBP 21:21:46 grant_decided You approved: Muse → Test Merchant (one keyboard)

Works with the agents you already use

Anything that speaks MCP connects with a sign-in, not a pasted key: Claude, Grok, and whatever you build yourself. The vault runs on Cloudflare's network, each person's in its own European-pinned store, with mail, the browser and payments on the same rails. No analytics, no trackers, your data is the only copy and you can export or delete it whole.