Give Claude Code permission, not your keys.
Claude Code can ship the fix, deploy the branch and refund the customer without a single key in its context, your shell history or your .env. Permaura holds the logins, makes the call itself, and sends anything risky to your iPhone, Apple Watch or Mac for a yes.
It's free on your own computer: the gateway runs from the terminal on macOS, Linux and Windows, or as the Mac app, or let Permaura host it. Approvals reach your iPhone and Apple Watch, your Mac, or the console in any browser.
Try itClaude Code is tidying up and picked the wrong repo.
Claude Code wants to delete a repository on GitHub
github.repos.delete · acme/payments-api
Agent says
You asked me to clean up unused repos, and this one has had no commits in 90 days.
Approve it or deny it. Nothing real happens here.
Set it up
Connect Claude Code in a few minutes.
Claude Code speaks the gateway's protocol natively, so there is nothing to install besides the gateway itself. One command registers Permaura for every project, and the code that identifies Claude Code never touches your shell history.
- 1
Sign up and run the gateway: free on your own computer with one command or the Mac app, or let Permaura host it. The welcome screen gives you the command with your pairing code filled in.
- 2
In the console, open Agents, then Connect agent, and pick Claude Code. Copy the command it shows for your operating system into bash or zsh, then paste the code at its hidden prompt. It saves the code to a file only your account can read and registers Permaura for every project.
macOS or Linux, with the docs' example address(umask 077 && mkdir -p ~/.permaura && IFS= read -rs T && printf '{"Authorization":"Bearer %s"}\n' "$T" > ~/.permaura/claude-code-header.json && chmod 600 ~/.permaura/claude-code-header.json) && { claude mcp remove --scope user permaura >/dev/null 2>&1; claude mcp add-json --scope user permaura "{\"type\":\"http\",\"url\":\"https://your-gateway.permaura.app/mcp\",\"headersHelper\":\"cat '$HOME/.permaura/claude-code-header.json'\"}"; } - 3
Confirm it landed with claude mcp list. Your connections appear as tools named after them, like db1.uptime. On Windows, the dialog gives you the PowerShell or Command Prompt form instead; open a new terminal afterwards.
- 4
Approve the agent on the Agents page, where it arrives as Pending, then give it a grant. Permaura is deny-by-default, so until then every call it makes is refused.
- 5
Gateway with a public address? Claude Code can skip the code and sign in through your browser when it connects instead:
Sign-in form, for a public gatewayclaude mcp add --transport http permaura https://your-gateway.permaura.app/mcp
The address and the code on this page are the examples from the docs. The console's Connect agent dialog fills in your own gateway's address and a live code, and names the exact menu or file for the client you pick. Source: The docs page Connect your AI client, and the console's Connect agent dialog.
What you'd use it for
Hand Claude Code the job. Keep the last word.
Three jobs people hand to Claude Code most, and the moment each one asks you. That is the default. You choose what needs approval.
GitHub
Ship the fix
It reads the issue, the code and the commits, and writes the change.
Asks you first: opening the pull request, and merging it.
Vercel
Deploy the branch
It reads your deployments, projects and domains, and checks which settings exist, by name only.
Asks you first: starting a deploy, adding a setting, or deleting a project.
Stripe
Refund a customer
It finds the charge, reads the invoice and checks the subscription.
Asks you first: the refund itself, and any payment or payout.
What Permaura can and cannot enforce
It guards the door it stands at, and says so.
Permaura governs what passes through it, and it has only the keys you have moved into it. Anything your assistant can reach another way, it reaches without asking.
Permaura governs
Every call made through a Permaura connection.
The key stays on the gateway, which adds it on the way out and scrubs it from the result. The assistant gets an answer, never the login.
What runs on its own, and what waits for you.
Reading runs on its own by default. Sending, spending, deleting and publishing start switched off and ask you first, app by app, and you can change any of it.
Who may say yes, and the record of it.
A held call waits for a tap on your iPhone, Apple Watch or Mac, or in the console, signed by that device. Every decision goes into a record you can check, and a pause from your phone stops every assistant at once.
Permaura does not govern
Claude Code's own tools: its shell, the files it edits, its hooks and skills, and any other MCP server in its config. Those run with whatever access Claude Code has on your machine, and Claude Code's own permission prompts are where you limit them.
Any key it can already reach. A token still in your .env or your shell's environment is one curl away, and that call never passes Permaura. Putting a service behind Permaura means moving its key in, taking it out of the assistant's reach, and rotating it, since it has already lived there.
The code it connected with. It is a credential Claude Code holds, and anything that can read that file can act as that agent, within that agent's grants. Removing the agent on the Agents page ends it at once.
Questions
What people ask before they connect Claude Code.
What happens if my assistant is tricked?
Its requests through Permaura still have to pass your rules. An action requiring approval waits for you; a denied action is blocked. An allowed action can still be misused, and data from an allowed read reaches the assistant. Permaura does not control its local shell, separate tools or credentials stored elsewhere.
Where do my passwords live?
The credentials you add stay with the gateway that runs your connections: on your computer for a local gateway, or on Permaura's servers for a hosted gateway. Permaura uses them to make requests on your assistant's behalf. Hosted means trusting Permaura to operate the service holding those credentials.
Can I turn it off?
You can pause access through Permaura or remove a connection. That stops access through the gateway. If an assistant also has a direct key or another connection to the app, you need to revoke that access separately.
What does it cost?
Running the gateway on your computer is free. Your computer needs to stay on for it to run. You can bring your own tunnel for remote access. Paid plans add hosting, a managed public address and team features. Plans are not priced per assistant or per call; hosted usage is subject to fair-use limits.
Give Claude Code its first safe connection tonight.
It's free on your own computer. Connect one app, say what needs a yes, and answer the first request from your iPhone, Apple Watch or Mac.