One gateway to every service your agent touches. You decide: deny, approve once, or approve all.
app.overslash.com / approvals
● connected
Workspace
⊟Agents
◫Services
✓Approvals3
☰Audit
⌘API
Admin
◉Users
⚙Settings
3 waiting · auto-refresh 5s
Allow deploy-bot to create a pull request?
expires in 9m
Permission
github:create_pull_request:overfolder/app
Title: "Fix bug in payment retry logic"
Last action
2m agoagent:research-bot fetched github:list_repos — bubbled to henry
11m agoagent:ci-runner denied aws.s3.delete_object
What it does
Overslash sits between agents and the outside world. It handles secrets, OAuth, MCP, permission chains, human approvals, and authenticated HTTP execution. The agent doesn't hold keys. You don't hold your breath.
⊟
Every agent gets an identity, a parent, and a blast radius. Sub-agents inherit rules from their parent — until you narrow them.
✓
The first time an agent wants a permission, you approve or deny. Allow & Remember at the scope ladder you choose.
◫
One place for client IDs, tokens, signing keys. Rotate, revoke, per-agent. No credentials ever touch the agent's context window.
☰
Every call, every bubble-up, every deny. Streaming, searchable, exportable.
⌘
Enroll any MCP client in a click — Claude Desktop, your own. Overslash brokers the tools, the credentials, and the approvals. The agent just asks.
◈
A sub-agent bubbles up to its parent when it hits an unknown scope. Parents bubble to humans. Denials are first-class and recorded.
How it works
Any MCP-capable agent — Claude Code, Overfolder, OpenClaw, or your own — connects to Overslash once. Overslash holds the credentials, enforces the rules, and hands each service an authenticated, audited request.
agent:henryagent:deploy-botagent:research-bot
GatewayOvers/ash
Checks rules. Injects credentials. Bubbles unknowns to parent agents or humans. Records every call.
authed request↓
Servicegithub.com
Receives a normal authenticated request. Knows nothing about the agent.
IdentityOverslash stamps every outbound call with a deterministic actor.
RulesRules live at the gateway. Not in prompts. Not in code. Editable by a human in one click.
Bubble-upUnknown scopes escalate up the agent tree, then to a human. Denials are recorded.
AuditEvery call, response status, bubble, and approval is streamed to the Audit log.
Integrations
First-class templates for the things agents actually touch. And a generic http service for anything else you can point a URL at.
GitHub
PRs, issues, actions
Google Workspace
Drive, Gmail, Cal
PostgreSQL
Read, write, migrate
+
Any HTTP API
Generic service template
…
More landing soon
Stripe, Zendesk, Jira, Intercom
Pricing
Three ways to use Overslash. Self-hosted gives you everything for free. Your Personal org on Cloud is free, forever. When you want to bring colleagues, create a Team org at €3 per seat.
Run it yourself. Full features — no gating, no license keys, no telemetry. Elastic License 2.0.
PERSONAL
Free for one
€0forever
A hosted Personal org, just for you. Always free, no card required.
TEAM
Per seat
€3.63/ month
1 seat · Every seat: €3 · + 21% VAT
Create Team orgs and bring your colleagues. Every seat €3. Your own Personal org stays free.
Open source
The gateway core is licensed Elastic 2.0. The services registry — the part the community contributes to — is MIT. No telemetry. No phone-home. Written in Rust and SvelteKit.
MIT · Elastic-2.0 · no telemetry
terminal~/overslash
# clone, build, run — local dev $ git clone https://github.com/overfolder/overslash $ cd overslash $ make install $ overslash web # ready on http://localhost:7171 # signing key generated · audit db initialised # paste the enrollment link into your MCP client
Install · get started
Paste the block below into Claude, Cursor, Open Interpreter, or any MCP-capable agent. It will follow the skill, enroll itself under your Overslash account, and ask you for permissions as they come up.
skill · agent enrollment
Your Human wants to give you access to external services via Overslash. To connect, follow the instructions at: https://www.overslash.com/SKILL.md
1. Paste
Drop the block into any MCP-capable agent.
2. Connect
Give the agent an identity and grant it services.
3. Use
Start using integrations. Dangerous actions bubble up for approval.
此内容由惯性聚合(RSS阅读器)自动聚合整理，仅供阅读参考。 原文来自 — 版权归原作者所有。