Permaura

At a glance

Permaura is an MCP gateway between your AI assistants and the accounts they act on, such as Stripe, GitHub and Gmail. The gateway keeps each app's credential and makes the call itself. Every request is checked against your rules: it runs, it waits for your approval on a phone, watch or desktop, or it is refused. The gateway is open source under Apache-2.0. Running it on your own machine is free, and Permaura also sells hosting.

Good fit

Developers who want an assistant working in accounts where a mistake costs money or reputation, such as issuing refunds, merging pull requests or sending email as you. Routine reads can run unattended while consequential writes wait for a yes. One policy layer can serve Claude Code, ChatGPT, Codex, Cursor, OpenClaw and other MCP clients, so you don't have to set up each app again for every assistant.

Consider something else when

You need your assistant's local shell, other tools or credentials stored elsewhere brought under control. Permaura's rules only cover requests that go through it, and data from an allowed read still reaches the assistant. Also skip it if you would rather not install a gateway and manage API keys. Google apps currently need your own OAuth app.

Start here

Create an account, install the gateway and add one connection, such as GitHub, with its key. In the console, Agents → Connect agent gives you an MCP server URL and a one-time code that expires after 15 minutes. Claude Code gets a ready-made command. A new agent sees only Permaura's own tools until a grant points it at a connection. Make one action require approval, pair the iPhone app or the Mac desktop app, then ask for that action and deny it.

Cost and requirements

As of 30 October 2026, the local gateway is free on Mac, Windows and Linux with the same policy engine, approvals and signed audit log as the paid plans. Your computer must stay on, and remote access needs your own tunnel. Pro is $19 a month under a limited offer (regular price $29) and adds one hosted gateway and a managed permaura.app address. Team costs the same per seat with a two-seat minimum. Trials require a card. Hosted clients such as ChatGPT and claude.ai need a publicly reachable gateway.

Limits to know

Hosting comes with trust tradeoffs that Permaura spells out. On a hosted gateway, the key that opens your vault sits in Permaura's cloud project, where its administrators can technically reach it. With the managed tunnel, Cloudflare terminates TLS, so Permaura and Cloudflare can see that traffic. If the gateway and your agents run as the same operating system user, any of that user's processes can read the operator token. The audit log is tamper-evident, not tamper-proof. Bring-your-own-key and SSO are only planned.

Still unclear

• Whether the open-source gateway, which holds production credentials, has had an independent security audit.