A firewall for your minions. Yes, no, or ask me first.

You’ve seen the stories of AI sending the wrong thing. Here, every action in every app meets your rule first.

Get started

What your fleet may do in Gmail

Reads start as Allowed. Anything that changes something asks you first. Some actions are never Allowed.

  • Read emails

    Search and read. Nothing is changed.

  • Save email drafts

    Saves a draft in your own account. Nothing is sent or published. Once a minion has read your email or the web, it asks first.

  • Label emails

    Add your own labels and make new ones. Nothing is sent or deleted.

  • Send messages

    Never Allowed

    It sends messages to other people

  • Delete emails

    Never Allowed

    It deletes things

  • Share outside your workspace

    Never Allowed

    It shares outside your workspace

  • Other changes

    Never Allowed

    Not reviewed yet

Example. Try a choice: nothing here is saved.
Needs you

Quill · Gmail

Send this reply to Marcus?

Marcus asked about your rates. Quill drafted a reply with your prices and two times for a call. It sends from your Gmail.

Sending messages can’t be set to Allowed

Send itNot now

Three answers, not two.

A firewall can only allow or block. You pick one of three for every action, and the whole fleet follows it.

  • Allowed

    It runs without asking.

    Reads start here. Only reads and changes we’ve reviewed by hand can be Allowed, and an allowed change goes on the job’s receipt.

  • Ask first

    It waits for your yes.

    Changes start here. You see exactly what it will send or change, and nothing happens until you approve.

  • Off

    It’s never offered.

    Your minions can’t use it, and aren’t even shown it.

Approved: Send the follow-up

10 seconds left to undo.

Undo

10 seconds to undo.

After you approve, nothing happens for 10 seconds, so you can take it back.

  • Invoice reminders drafted · Penny$0.21
  • Follow-up sent to Dana · Penny$0.03

Spending limit $5.00

Every cost, to the cent.

Each job shows what it really cost, and nothing runs past the spending limit you set.

Checked on our server. Every time.

Your rules aren’t a note your minions read. They’re a check that runs on our side, the moment an action would run.

Gmail

Your rules for Gmail cover every minion

  • Penny

    Finance

    Uses Gmail
  • Quill

    Writing

    Uses Gmail
  • Tally

    Operations

    Uses Gmail
  • Scout

    Research

    Kept out of Gmail

Anyone you hire next follows the same rules.

Every action, every app.
Each time a minion uses one of your apps, that action meets your choice for it, right then. Change a choice and the next action follows it.
One rule per app, for the whole fleet.
Set Gmail once and every minion follows it, including the next one you hire. You can also keep one minion out of an app.
Your minions never see your app passwords.
Apps connect through their own secure sign-in. Your minions get back the results, never a password or a key.
Hidden instructions can’t change your rules.
An email or a web page can carry words meant to steer a minion. They can change what it tries, never your rules: nothing it reads can turn Ask first into a yes, or Off back on.

Five things are never Allowed.

No setting makes these Allowed, and “Always allow” is never offered for them. They start at Ask first, and you can turn any of them Off.

  • Send messagesEmails, chat messages, textsNever Allowed
  • Delete thingsEmails, files, recordsNever Allowed
  • Move moneyPayments, refunds, transfersNever Allowed
  • Post publiclySocial posts, videos, website pagesNever Allowed
  • Share outside your workspaceSharing files or links with othersNever Allowed

You see exactly what it will do.

An ask shows exactly what will be sent, field by field, and which app it goes to, before anything happens.

Exactly what’s sent.
What you approve is exactly what goes out. If it isn’t right, say no.
Marked when it read something from outside.
If the job read an email or a web page before asking, the ask says so and names where it read it.
Several alike, decided together.
Like asks from one minion come as one card: approve them all, review each, or say no to all.

Penny wants your OK

Send Email

For “Chase unpaid invoices”

Where
Gmail
Cost
No cost

Asked after reading outside content

Before asking, the minion read things other people wrote. Check the items with care.

Gmail

Exactly what it will send

To
dana@example.com
Subject
Invoice #1042, due Oct 12

Message

Hi Dana, a quick reminder that invoice #1042 for $1,850 was due on the 12th. You can pay it from the link in the invoice. Thanks!

Nothing changes in Gmail until you approve, and you can undo for 10 seconds after.

Send EmailDon’t do this
Example

Your stuff stays yours.

The AI behind your minions doesn’t train on your chats or files, and neither do we. Delete everything in one step.

Meet your minions.

Pick a plan, then tell Mochi what eats your week.

Get started