TEND holds risky tool calls until you say yes, then runs each one exactly once.
Read-only, with sample agents. No sign-up.
TEND checks what your AI agents try to do and holds risky actions until you say yes
1 request needs your answer
Spends money
Asked 2m ago · Expires in 8 min
The exact request
EUR 4800.00 to Acme GmbH (PAYEE-7)
Nothing happens until you allow it. Allowing lets this exact request run once. Change what needs your OK
| Action | Decision |
|---|---|
| EUR 4800.00 to Acme GmbH (PAYEE-7)ops-agent · pay_invoice.execute | Needs approvalThis action needs approval |
| Run: git push --force origin mainrepo-helper · shell.Bash | RejectedNeeds approval → RejectedDecided by a person |
| Run: npm testrepo-helper · shell.Bash | RanAll commands run and are recorded |
| Read: ~/.ssh/id_ed25519repo-helper · file.read.Read | BlockedFile reads whose path contains “.ssh” are blocked |
| Read: src/app/page.tsxrepo-helper · file.read.Read | AllowedAllowed by the agent’s policy |
| Open: https://api.example.com/refundsresearch-agent · web.WebFetch | RejectedDecided by a person |
Tool calls your connected agents send through TEND are checked before they run. Other apps, commands you type yourself, and any agent whose TEND hooks were removed are not covered.
Interactive demo. Nothing real runs.
Works with
Swipe to explore
Every request and decision, hash-chained.
One key per agent. Revoke one, the rest keep running.
Verified, At Risk or Not Verified, one claim each.
Approve and read the log from your terminal.
Hooks, adapters and an MCP proxy for the agents you run.
Four properties, each enforced in one place you can read.
An approval is bound to the exact agent, tool and arguments and spent in one atomic step, so a changed, reused, expired or other-agent request is refused.
Read howIn gateway mode the agent never holds the key: TEND does, and runs the call once.
Read howIf TEND is unreachable or errors, nothing runs.
Read howEvery entry is hash-chained to the one before, so an edit breaks the chain.
Read how