Permaura

Permaura is an AI agent security gateway that manages app permissions and requires approvals without sharing keys.

Permaura is an open-source gateway that lets AI assistants work across external applications while keeping credentials secure. The platform stores app keys within the gateway so that agents receive only the results of requests rather than the underlying credentials. Users can define custom policies, set specific actions to require approval, and review pending requests on desktop, web, or mobile devices such as iPhones and Apple Watches. It supports various assistants like Claude, Claude Code, ChatGPT, Codex, Cursor, and other Model Context Protocol clients. The system handles multiple connected services including GitHub, Stripe, Slack, Gmail, and any API with an OpenAPI specification, generating signed audit records for all decisions.

Permaura at a glance

Best for: Software engineer
Runs on: Web, macOS, Windows, Linux, iOS, API, self-hosted, open source
Pricing: Free plan; Pro $19/month or $190/year; Team $19/month or $190/year per seat
Released: October 2026
Category: AI agent tool
Website: permaura.com

Key features

Manage app permissions and access rules for AI assistants
Require device-signed approvals on mobile or desktop for critical actions
Store API credentials securely within the gateway
Generate signed and linked audit records for actions
Connect multiple AI models and Model Context Protocol clients
Run locally for free or use hosted gateway options
Connect applications via prebuilt integrations or OpenAPI specs

Use it for

Review and approve customer refunds before execution
Authorize AI agents to open or merge pull requests
Draft email replies and approve sending conversations
Enforce security policies across multiple AI tools

Alternatives to Permaura

Composio — Equips AI agents with tools, managed user auth, and sandboxes across 1,500+ apps
Melra — Governs AI agent tool calls with local policies, approval gates, and verified receipts.
OpenAPPA — Tracks data flows algebraically to prevent prompt injection without breaking agents.
Agent2api — It combines multiple AI desktop client accounts into one local OpenAI-compatible API.
Agent Middleware — Requires signed permits and provides offline-verifiable receipts for tool calls.
AG-UI — Standardizes agent-user interactions and generative UI for applications.
Caura — Governed memory providing persistent knowledge sharing for AI agent fleets.
Agent Delegated Authority — It defines cryptographically verifiable authorization receipts and deterministic boundaries.
Rakazo — Complete ownership of data, models, and execution environment.
BrowserOS — Runs entirely locally and lets AI agents use real user logins to complete tasks.
Beeuni — Agents retain context and improve skills over time through a controlled review process.
Limma — It answers queries with complete sets and proof instead of partial search fragments.

All Permaura alternatives