Sign-inGoogle, Microsoft or your SAML SSO. Agents act as the person who set them up — never as a shared admin.
CANOPY · ACCESS CONTROL FOR AGENTS
Access, granted on purpose.
Give agents real tools without giving away the keys. Canopy decides what each agent may touch, holds every credential, asks a person when it matters and signs every action.
Every agent starts with nothing.
Grant each agent the tools its job needs — allow, ask, or not at all. Change a cell and it applies on the next call; nothing to redeploy.
| Agent | Gmail | Stripe | Slack | Sheets | Browser |
|---|---|---|---|---|---|
| Sales | Ask | — | Allow | Allow | Ask |
| Ops | — | Allow | Allow | Allow | — |
| Support | Allow | — | Allow | — | Ask |
| Site | — | — | Ask | — | Allow |
Above your line, a person says yes.
Dollar amounts, new recipients, anything public. The agent pauses, you get one card with the exact action, and the answer is recorded with your name on it.
WaitingSales → gmail.send × 3
to: dana@northwind.co (+2) · value $14,200 · policy: email > $5k
Keys stay in. Agents get a handle.
OAuth tokens, API keys and portal logins live in Canopy. An agent receives a scoped, short-lived handle for one call — never the secret, never in a prompt.
Stripe · live
charges.read, refunds ≤ $200used by Opsrotated 2d
Google · sales@acme.com
gmail.read, gmail.send (ask)used by Sales, SupportOAuth · 14d
Supplier portal
browser login, invoices.readused by Opssession · 6h
Signed, dated, kept.
Every call an agent makes is written down with who asked, who allowed it and a hash chained to the one before. Export it, search it, hand it to your auditor.
09:07:12Salesgmail.send × 3approved · eugene@
09:06:40Sitesites.deploy acme.side.hostpolicy · auto
09:05:02Salestables.upsert Leads (3 rows)policy · auto
09:02:18Salesgmail.read sales@grant · 14d
RolesOwner, admin, builder, viewer. Each role caps what its people can grant their agents.
Spend capsPer agent, per run, per month. An agent that would cross the cap stops and asks.
Two plans, from $25 a month.
Developer is $25 a month with $15 of credits. Builder is $99 a month with $60 of credits. Credits renew every month.
Developer
$25 / month
For building and trying things out in your own workspace.
- Includes $15 of credits every month
- Pay as you go beyond that, at the listed rates
Builder
$99 / month
For running what you build for your business, live at its own address.
- Includes $60 of credits every month
- Pay as you go beyond that, at the listed rates