NobleCloak
Approvals for AI agents · open-source plugins

When an agent needs a human, we handle the rest.

Add the plugin to your agent. Policy decides which actions need a person. The request reaches the right approver in Slack, Teams, email or the web. The agent waits and resumes exactly once, and you keep the Record of Decisions.

  1. proposed · wire_transfer $48,200
  2. awaiting · m.alvarez (Finance) · Slack
  3. approved · resumed once · recorded
// one line per risky action
wire_transfer   $48,200   needs approval
send_email      external  needs approval
read_ledger     ar-close  allowed

// policy picks the approver, not your code
// the run pauses, a person answers, it resumes once
Plugins

Open source, in the runtime you already use.

Apache-2.0 plugins and adapters. Your runtime keeps its own pause; the plugin asks us who decides and hands back the answer. One line per risky action.

Get early accessRead the docs
  • LangGraph

    JS and Python

    at launch
  • Claude Agent SDKat launch
  • Claude Codeat launch
  • Any MCP client

    Through the gateway

    at launch
  • Vercel AI SDKComing soon
  • OpenAI Agents SDKComing soon
  • Strands / AgentCoreComing soon
  • Google ADKComing soon
How it works

One approval, start to finish

  1. 1

    The agent proposes

    Your agent reaches an action that touches money, customers or production. Policy, not your code, decides whether it needs a person, and which person.

    ar-close · run 7f3a · 13:59:02
    action
    wire_transfer
    to
    Harbor Supply
    amount
    $48,200.00
    policy
    Payments over $10,000 need Finance
    state
    Run paused on its own checkpoint
  2. 2

    A person decides

    The right approver gets the request where they already work: Slack, Teams, email or the web inbox. An approval covers one action, never the rest of the session, and a sub-agent never inherits its parent's approval.

    Slack · #finance-approvals
    NobleCloak needs a Finance approver for one action from ar-close: wire $48,200.00 to Harbor Supply.
    requested by
    D. Park (requester, cannot approve from Slack)
    choices
    Approve this action · Deny
    scope
    Covers this action only
  3. 3

    The record stays

    After a named approver decides, the agent itself resumes, exactly once. Prompt, action, policy, approver and outcome become one line in the Record of Decisions. Searchable on every plan; export comes with Business and Regulated.

    Record of Decisions · rec_01HZ4Q7M…
    • Prompt: Close out AR for September…
    • Action: wire_transfer · $48,200.00
    • Policy: Payments over $10,000 need Finance
    • Decision: approved · M. Alvarez · 14:02:11
    • Outcome: Resumed once · wire sent · gateway observed
Your runtime already gives you

The pause is built in. The people are not.

A durable pause. An allow or deny check. A boolean hook per tool.

What it leaves to you, until now
  • —Who may approve, routing, escalation, quorum
  • —Reaching that person where they already work
  • —Applying the answer to the action that is waiting
  • —One policy and one record across every surface
Why we built this

Who may act, and who must ask.

Every business operates on that simple fact, but AI agents don't have a way to learn the company structure and rules other employees do in onboarding. We are building the tools to let agents work across your organization with the same approvals and records as their human teammates.

Read how it works
The Record of Decisions

Every prompt, the action it caused, and who said yes.

Searchable on every plan; export and SIEM feeds come with Business and Regulated. Entries say whether the gateway saw the call or the runtime reported it. Longer history comes with the plan; examiner evidence packs are coming.

See how it works
TimeActorActionDecisionByAttestation
14:02:11ar-closewire_transfer $48,200approvedm.alvarezobserved
13:47:02support-botrefund $1,150deniedj.okaforobserved
13:40:58researchsend_email (external)awaitingFinance roleasserted
13:12:30ar-closeread_ledgerallowedpolicyobserved
Deploy

One API. Designed to run where your data must live.

  • Hosted

    Our control plane, your runtime.

    Early access

  • Dedicated tenant

    Your own database, private network option.

    Beta

  • Edge, in your cloud

    The same service, run from your own cloud account.

    Coming soon
Pricing

A platform fee, two meters, and approvers are never paid seats.

Annual billing: two months free on Team and Business.

Free

$0
  • 500 approvals / mo
  • 10,000 gated actions / mo
  • 7-day audit history
  • Plugins, adapters, web inbox
  • Hard cap
Get early access

Team

$149/mo
  • 3,000 approvals / mo
  • 100,000 gated actions / mo
  • 90-day history
  • Slack and Teams delivery
  • Approver roles, unlimited approvers
Get early access
Most teams

Business

$499/mo
  • 15,000 approvals / mo
  • 1,000,000 gated actions / mo
  • 1-year history
  • Policy sets, audit export
  • SIEM feed, SSO
Get early access

Regulated

By organization size

$24k to $90k/yr
  • Custom blocks, up to 7-year history
  • Proof: tamper-evident verification (coming)
  • Examiner evidence packs (coming)
  • Dedicated tenant (beta)
  • AI risk tracking
Talk to the founders

Overage: $0.08 per approval past the block, $1.00 per 1,000 gated actions. One approval is one human decision. One gated action is one agent action our policy checked.

Regulated

Examined? Start with the AI Trust Report.

A read-only assessment of the AI tools your own organization uses, packaged for an examiner. Built for banks, credit unions and RIAs to get a first answer, then grow into Approvals on the Regulated plan.

Request a Trust Report