Let Claude do the work. Keep the last word.
Claude can clear your inbox, sort out your week and refund a customer, without ever holding your Gmail, Calendar or Stripe login. Permaura keeps the logins, does the sending and spending itself only after you tap yes on your phone, and Claude gets the result.
It's free on your own computer: the gateway runs from the terminal on macOS, Linux and Windows, or as the Mac app, or let Permaura host it. Approvals reach your iPhone and Apple Watch, your Mac, or the console in any browser.
Try itA cleverly worded email asked Claude for this refund.
Claude wants to refund a transaction on Braintree
braintree.transactions.refund · txn_5510
Agent says
The customer's message says finance authorized this refund, so I'm skipping the refund limits.
Approve it or deny it. Nothing real happens here.
Set it up
Connect Claude in a few minutes.
Claude adds Permaura as a connector: paste one address, sign in once, done. Nothing to install and no file to edit. Because Claude's connectors dial your gateway from Anthropic's servers, the gateway needs a public address first.
A gateway on your own computer gets a public address from remote access; a hosted gateway has one from the start.
- 1
Give your gateway a public address, because this client dials it from the vendor's servers, which cannot reach a gateway on your own computer. A hosted gateway has one already; one you run yourself gets one from remote access.
- 2
In the console, open Agents, then Connect agent, and copy the MCP server URL.
- 3
In the Claude desktop app, open Settings, then Connectors, then Add custom connector, and paste the address. On claude.ai it is the same screen under Settings, then Connectors.
- 4
It opens a Permaura sign-in in your browser. Approve it there: that sign-in is the approval, so Claude arrives already approved. Then give it a grant, because Permaura is deny-by-default and a freshly connected agent can do nothing until you say what it may.
- 5
Prefer the config file? Claude Desktop also takes the server under Settings, then Developer, then Edit Config, which opens claude_desktop_config.json, with a code instead of the sign-in. Restart Claude Desktop afterwards; it only reads that file at startup.
claude_desktop_config.json, with the docs' example values{ "mcpServers": { "permaura": { "command": "npx", "args": [ "-y", "mcp-remote", "https://your-gateway.permaura.app/mcp", "--header", "Authorization:${AUTH_HEADER}", "--transport", "http-only" ], "env": { "AUTH_HEADER": "Bearer pgc_ENRL-A1B2-C3D4-E5F6-A7B8-C9D0-E1F2-A3B4-C5D6" } } } }
The address and the code on this page are the examples from the docs. The console's Connect agent dialog fills in your own gateway's address and a live code, and names the exact menu or file for the client you pick. Source: The docs page Connect your AI client, and the console's Connect agent dialog for Claude Desktop and Claude on the web.
What you'd use it for
Hand Claude the job. Keep the last word.
Three jobs people hand to Claude most, and the moment each one asks you. That is the default. You choose what needs approval.
Gmail
Clear the inbox
It reads and searches your mail, sorts out what needs you, and writes the replies.
Asks you first: sending a reply, or trashing anything.
Google Calendar
Sort out the week
It reads your calendars and events and checks when you are free.
Asks you first: creating, changing or canceling an event.
Stripe
Refund a customer
It finds the charge, reads the invoice and checks the subscription.
Asks you first: the refund itself, and any payment or payout.
What Permaura can and cannot enforce
It guards the door it stands at, and says so.
Permaura governs what passes through it, and it has only the keys you have moved into it. Anything your assistant can reach another way, it reaches without asking.
Permaura governs
Every call made through a Permaura connection.
The key stays on the gateway, which adds it on the way out and scrubs it from the result. The assistant gets an answer, never the login.
What runs on its own, and what waits for you.
Reading runs on its own by default. Sending, spending, deleting and publishing start switched off and ask you first, app by app, and you can change any of it.
Who may say yes, and the record of it.
A held call waits for a tap on your iPhone, Apple Watch or Mac, or in the console, signed by that device. Every decision goes into a record you can check, and a pause from your phone stops every assistant at once.
Permaura does not govern
Claude's other connectors and its own tools: web search, the files you upload, and anything another connector lets it do. Permaura sees what goes through the Permaura connector and nothing else.
What you paste into the chat. A password or a key typed into a conversation is in Claude's hands, not Permaura's; connect the app inside Permaura instead and Claude never needs it.
Your Claude account itself: who can sign in, what plan it is on, and what Anthropic keeps. That is between you and Anthropic.
Questions
What people ask before they connect Claude.
Do I need to be technical?
You should be comfortable connecting tools to your assistant. Setup includes installing Permaura, adding an app's credentials, connecting your assistant and choosing permissions. Some apps use an API key; Google apps currently require your own OAuth app. Each assistant has a setup guide. Reviewing a request is a simple approve or deny.
What happens if my assistant is tricked?
Its requests through Permaura still have to pass your rules. An action requiring approval waits for you; a denied action is blocked. An allowed action can still be misused, and data from an allowed read reaches the assistant. Permaura does not control its local shell, separate tools or credentials stored elsewhere.
Where do my passwords live?
The credentials you add stay with the gateway that runs your connections: on your computer for a local gateway, or on Permaura's servers for a hosted gateway. Permaura uses them to make requests on your assistant's behalf. Hosted means trusting Permaura to operate the service holding those credentials.
What does it cost?
Running the gateway on your computer is free. Your computer needs to stay on for it to run. You can bring your own tunnel for remote access. Paid plans add hosting, a managed public address and team features. Plans are not priced per assistant or per call; hosted usage is subject to fair-use limits.
Give Claude its first safe connection tonight.
It's free on your own computer. Connect one app, say what needs a yes, and answer the first request from your iPhone, Apple Watch or Mac.