Avirak

Let your AI agents use real tools. Safely.

Avirak runs your agents and guards every call they make. Pick a world, then scroll.

Scroll

Avirak09:05

expires in 29:51

holds 3 keysholds nothing. avirak has the keys

avirak

avirak runs · judges · keys · record keys stay here

rules v3 · signed

How it works

Three steps. One file. No agent ever sees a key.

Step 1

Install a pack

$ avirak pack install zoom ✓ zoom 0.1.1 · 6 tools · 2 events $ avirak pack auth zoom ✓ signed in · token kept by avirak $

Zoom, Slack, GitHub, a calendar, a payments provider or any MCP server. Log in once. Avirak keeps the token.

Step 2

Write one file

roles: - name: reporter tools: [zoom.list_recordings, slack.post] govern-rules: - match: {action: slack.post, channel: "#customers"} effect: require_approval hold: {ttl: 30m, on_expiry: deny} - match: {} effect: deny

What starts work, which agents run with which tools, and what waits for a person. Anything you did not mention is refused.

Step 3

Approve from anywhere

Avirak · hold09:05

reporter wants to slack.post #customers

ApproveRefuse

expires in 29:51 · silence refuses

Holds reach your phone, the console or Slack. One tap to approve or refuse. Silence never means yes.

Guarantees

Built in. No setting turns them off.

Always recordedEvery decision lands in the audit trail, with the version of the rules that judged it.
Agents never approveOnly a person can answer a hold. An agent has no way to.
Human gates stayA rule that asks for a person cannot be overridden by a looser one.
Silence is a noAn unanswered request expires as refused, never approved.
Rules only tightenHouse rules and per-workflow overlays can add a hold or a refusal. They can never remove one.
Work never applies twiceEvery step runs under a lease with heartbeats. A lost race or a stale claim is refused, not repeated.

The console

One queue. Every hold, every workflow, waiting on a person.

Approve is one hold at a time, by design. Bulk deny only. Every row shows the exact arguments the call was decided on.

constitution · 4 articlesledger · recordingoperator · human

gategithub.merge PR 412reporter · rule 4 ·

heldslack.post #customersreporter · rule 3 ·

heldpayments.charge ₹48,000planner · rule 3 ·

Audit ledger · live

Runs on your side

One program. Your database. Your machine.

Tokens, decisions and the audit trail never leave your company. Nothing to sign up for, no identity provider to adopt. Agents on other machines reach it over mutual TLS.

Your machine

Agentsroles, sandboxed

avirakrules · keys · holds

Databaseaudit trail

ZoomSlackGitHubCalendarPaymentsany MCP server

Where teams start

Same checkpoint, any line of work.

Engineering

Agents implement, review and test. Review and QA can never be the same agent that wrote the code.

allowread recordings, post to the team channel
holdpost to customers, merge a pull request
denyforce-push, delete a repository

Clinic

A front-desk agent triages requests and keeps the day's schedule tidy. A nurse answers every patient message before it leaves.

allowread its own patient list, move a slot
holdmessage a patient, cancel an appointment
denyexport records, touch a prescription

Travel

A planner turns enquiries into itineraries and holds seats. Money moves only when the owner taps approve.

allowsearch fares, hold a seat, draft a plan
holdcharge a card, send the itinerary
denycancel a booking, refund

Avirak is Cloudflare for AI agents: every tool call passes through it, allowed, held or refused, and every one is on record.

Early access

We are onboarding a small number of teams.

Tell us which agents you run and which tools you want them to reach. We will set you up and walk through the first workflow with you.

hello@rajendrasharma.me