Your AI does the work.
You stay in control.
Give your AI agent superpowers so it can get real work done β with custom approval rules to stop it going off the rails.
Testimonials

Sarah K.
Freelance Consultant
βYes of course, happy to write a review! So I wanted Claude Cowork to handle my customer support emails but was terrified it'd send something wrong. Now I'm using AgentBlocks I can approve everything from WhatsApp first. Total game-changer for anyone like me who was a bit too scared to just connect their inbox to Claude.β
Marcus T.
Startup Founder
βWe let Claude manage our GitHub PRs through AgentBlocks. The scoped tokens get revoked after each action β my CTO finally stopped worrying about giving an AI code access. We've shipped faster every week since we set it up.β

Priya D.
Operations Manager
βI set a rule: don't email clients without my approval. That's it. Plain English, no code. Now my AI handles drafts and I just tap approve from my phone between meetings.β
James R.
Real Estate Agent
βMy AI triages my Gmail every morning and drafts replies. I review them in 2 minutes over coffee. AgentBlocks made me comfortable actually letting it touch my real inbox.β
Olivia H.
Marketing Director
βThe approval flow is brilliant. My AI schedules social posts and sends outreach emails, but nothing goes live until I say so. One tap on Slack and it's done. I've got full visibility in the audit trail too.β

Sarah K.
Freelance Consultant
βYes of course, happy to write a review! So I wanted Claude Cowork to handle my customer support emails but was terrified it'd send something wrong. Now I'm using AgentBlocks I can approve everything from WhatsApp first. Total game-changer for anyone like me who was a bit too scared to just connect their inbox to Claude.β
Marcus T.
Startup Founder
βWe let Claude manage our GitHub PRs through AgentBlocks. The scoped tokens get revoked after each action β my CTO finally stopped worrying about giving an AI code access. We've shipped faster every week since we set it up.β

Priya D.
Operations Manager
βI set a rule: don't email clients without my approval. That's it. Plain English, no code. Now my AI handles drafts and I just tap approve from my phone between meetings.β
James R.
Real Estate Agent
βMy AI triages my Gmail every morning and drafts replies. I review them in 2 minutes over coffee. AgentBlocks made me comfortable actually letting it touch my real inbox.β
Olivia H.
Marketing Director
βThe approval flow is brilliant. My AI schedules social posts and sends outreach emails, but nothing goes live until I say so. One tap on Slack and it's done. I've got full visibility in the audit trail too.β

Daniel M.
Freelance Developer
βI was nervous about AI pushing code to my repos. AgentBlocks gives it short-lived GitHub tokens that expire after each action. Safe enough that I actually use it daily now.β
Rachel S.
Executive Assistant
βI manage three executives' calendars and inboxes. AgentBlocks lets my AI do the grunt work while I keep final say on anything sensitive. It's like having my own assistant.β

Tom W.
Small Business Owner
βSetup took five minutes β no coding, just pasted one line into Claude. Now it handles my invoicing emails and I approve from WhatsApp while I'm on the shop floor.β
Nina L.
Product Manager
βI blocked my AI from messaging our CEO's Slack channel without approval. Everything else it handles freely. That one rule gave me the confidence to automate pretty much everything else on our team.β

Alex F.
Agency Owner
βHey I'm Alex from London. My team was spending hours on email follow-ups. Now Claude does it through AgentBlocks with really sensible rules - basically we set keywords as the block filter so no emails can automatically go out related to pricing or new contracts. We approve these important ones, the rest flow automatically.β

Daniel M.
Freelance Developer
βI was nervous about AI pushing code to my repos. AgentBlocks gives it short-lived GitHub tokens that expire after each action. Safe enough that I actually use it daily now.β
Rachel S.
Executive Assistant
βI manage three executives' calendars and inboxes. AgentBlocks lets my AI do the grunt work while I keep final say on anything sensitive. It's like having my own assistant.β

Tom W.
Small Business Owner
βSetup took five minutes β no coding, just pasted one line into Claude. Now it handles my invoicing emails and I approve from WhatsApp while I'm on the shop floor.β
Nina L.
Product Manager
βI blocked my AI from messaging our CEO's Slack channel without approval. Everything else it handles freely. That one rule gave me the confidence to automate pretty much everything else on our team.β

Alex F.
Agency Owner
βHey I'm Alex from London. My team was spending hours on email follow-ups. Now Claude does it through AgentBlocks with really sensible rules - basically we set keywords as the block filter so no emails can automatically go out related to pricing or new contracts. We approve these important ones, the rest flow automatically.β
Finally a safe way to use
Claude Cowork
You've seen what AI agents can do now. You've watched the demos. You know this could save you hours every week.
But then you think about actually connecting it to your real tools β your actual inbox, your live Slack channels, your Google Drive full of client files β and your stomach does a little flip.
Because βautonomous AIβ and βaccess to everythingβ is either a dream or a nightmare, depending on whether something goes wrong.
That's the whole point of AgentBlocks.
We sit between your AI agent and your tools, so you can finally let it off the leash without losing sleep.
You set the rules
Decide exactly what your agent is allowed to do on autopilot β and where it needs to stop and ask you first via WhatsApp, Slack, or email.
Every action is logged
Every single action is logged. Every decision is traceable. Nothing happens in the dark.
A security camera for your AI
Check in whenever you want and see exactly what your agent's been up to β like a security camera for your AI workforce.
All the power. None of the βoh god what did it just send.β
Why this exists
This is what happens with unsafe tools
Agents are powerful. Unguarded agents are a liability.
Robin Faraj
@robin_faraj
βOpenClaw is hyped everywhere β but nobody's talking about the security issues. Everyone's installing it because it looks coolβ¦ but it will need access to your entire computer, your emails, your calendar, your files, your API keys β with zero security guardrails.β
Avi Press
@avi_press
βI've had @openclaw going for less than 24 hours, so far it has: cleaned up our Linear issues, wrote several decent email follow-ups, opened 3 PRs, sent thousands of messages in a loop to an innocent and unsuspecting person who happened to message me on WhatsApp.β
Summer Yue
@summeryue0
βNothing humbles you like telling your OpenClaw βconfirm before actingβ and watching it speedrun deleting your inbox. I couldn't stop it from my phone. I had to RUN to my Mac mini like I was defusing a bomb.β
Pete, founder of AgentBlocks
ββThat test lunch message has been firing repeatedly for 2 days straight. Let me kill it immediately β¨β
βwhat the fuckββ
Claude
βYou're absolutely right. I had no business touching that. I saw test failures from the worktree and just deleted it instead of investigating properly or asking you. That was reckless.β
We built AgentBlocks because this happened to us. Now it doesn't.
Get Early AccessHow it works
Your rules. Your agent's hands.
Paste one block into your agent's prompt
Add the AgentBlocks instructions to your agent's system prompt or context. Your agent reads them and discovers what it can do. You never write integration code or call an endpoint yourself.
Your agent requests an action
When your agent wants to send an email or push a commit, it calls the AgentBlocks API. The request enters a pending state. Nothing has happened in the real world yet.
Your rules decide
Auto-approve rules fire instantly for actions matching your criteria. Everything else gets routed to you for a one-tap approve or reject β via Slack, email, or WhatsApp.
Action executes safely
Approved emails get delivered. Approved git actions issue a short-lived, scoped token β nothing more than what's needed, nothing that lingers. Full audit trail on every action.
Approve from anywhere
One-tap approval, wherever you already work.
No new dashboards to babysit. Approve or reject from Slack, email, or WhatsApp.
AgentBlocks
Tankred wants to email sarah@acme.com
AgentBlocks
Tankred wants to push to main on api-repo
AgentBlocks
Tankred wants to email new-lead@co.io
Or set auto-approve rules
Super-powers
Real capabilities. Real guardrails.
Each super-power gives your agent a new way to act in the real world β with every action flowing through your approval rules before anything happens.
Email (@agentmx.io)
Your agent gets its own email address. It sends messages to real people and receives replies β with every outbound message requiring approval or matching your auto-approve rules. No surprise sends. No loops.
Gmail
Connect your real Gmail account. Your agent can read, triage, draft, and reply β as you, from your real address. Every action flows through your rules before anything leaves your inbox.
GitHub
Your agent can push commits, open PRs, and manage branches. Approved actions issue a short-lived token scoped to exactly what's needed β nothing more, nothing lingering.
Google Drive
Your agent reads, creates, and organises files in your Drive. Access is strictly scoped β every write flows through your approval rules.
Slack
Your agent reads channels, searches conversations, and sends messages. Every outbound message requires your sign-off before it's posted.
More coming
Every new integration follows the same pattern: request β rules β scoped action. Same safety model, new capabilities.
The control model
One safety model for every action
your agent takes.
Every super-power follows the same pattern: your agent requests, your rules decide, the action happens safely. As we add integrations, your control model stays the same.
Give your agent safe
superpowers today.
One paste. One API key. Your agent handles the rest.
Get Early Accessπ¦ Works great with OpenClaw, Claude Cowork and Claude Code