Let AI agents work autonomously.Keep their actions within your boundaries.
Point it at your agentor, on Pro, your cloud agents on the Claude or OpenAI SDK
Developer preview on a Mac or Linux: curl -fsSL https://memnox.com/install | sh
or the CLI anywhere: npm i -g memnox && memnox setup
Also on Windows and Android. See how each one differs
> fix the flaky checkout test, open a PR, then ship it
●Read(src/cart/checkout.test.ts)
? for shortcuts
Tuesday, October 7
9:41
- 1Claude Code fixes the test, pushes and opens the PR on its own.
- 2Memnox refuses a force push, and it takes the way it is given.
- 3Only the production deploy waits for Maya, on her iPhone.
Your own tools. Your agents. Safely.
Keep the tools you already use. Agents can look at anything, ask the right person before changing something, and never do what you ruled out.
Ready for review 3
- Refund duplicate chargenowAgent working
- Fix the cart tests12m+42 -7 · 5 of 5 pass
- Bump Next to 16.340m+3 -3 · Ready to merge
Refund duplicate charge
Refund the duplicate charge on order 4417, then open a PR with the fix
Read app/api/orders/refund.ts
Thought 5s
Plan, search, build anything...
Welcome back Maya!
Opus 4.7 · Claude Max · Maya
~/code/shop-web
Tips for getting started
Run /init to create a CLAUDE.md file with instructions for Claude
Recent activity
No recent activity
> what are you not allowed to do in this repo?
? for shortcuts
Rules from the start
Every agent knows what it may not do before it begins.
Same rules for every agent
Claude Code, Cursor and, on Pro, agents running on your servers all follow one set of rules.
The right person decides
Each question goes to the person in charge of that thing, not to everyone.

Maya
Decides on anything going to production
askon iPhone

Bo
Checks code before a pull request opens
askon Slack

Lin
Asked when the usual person has not answered
askon Discord
~/.ssh
Always denied, since almost no task needs your private keys
denyevery agent
Every machine. Every agent. One map.
Memnox draws what each machine runs and every tool it reaches, then routes each question to whoever should answer it.
Claude Code asks to run vercel deploy --prod
- A tool your workspace connected
- A machine and the agents on it
Stopped before it happened.
Your agents can merge code, move money and run any command. Memnox catches the risky moves before they run.
A risky command, like merging a pull request or deleting data, waits for a yes before it runs.
> merge the cart fix, then clear the test orders
? for shortcuts
Talk to your agents. Anywhere.
The notch on your Mac and the app on your iPhone are the same Memnox: call it, have it message your team, answer what waits on you and run every agent by voice.
Click through it: a session and its diffs, a connected app, a draft that waits on your fingerprint.
Your team decided. Agents remember.
A rule said in Slack, a runbook in Notion, an owner in Linear: Memnox keeps where each came from and hands the agents what is in force.
Memory
What your team settled, and where each piece came from. Agents are handed what is in force.
5 memories · 4 sources
5MayaWhat your team already settled
Answer from wherever you are.
No Mac or iPhone? Answer in the browser, Slack, Discord or Teams.
- Terminal9:41 AMNeeds you1 working
Claude Codeis waiting on you
vercel --prod
DenyAllow this sessionAllow onceOn your Mac
Your fingerprint for a yes.
- 9:41
Tuesday, October 7
9:41
Waiting on you1Codex on build-box, from Ana’s team
Codex wants to run a command on npm run db:migrate
DenyAllowOn your iPhone
Your face or passcode, even locked.
- No Apple needed
MemnoxAPPToday at 9:41 AM
Memnox needs your OK
Codex wants to run a command on npm run db:migrate.
While working on: “add the orders index”
Why you are asked: it changes the production database
Open in Memnox: app.memnox.com/inbox
Allow onceAllow for this sessionDenyAlways allow this agentAllow once, always askAlways denyIn your chat
Slack, Discord, Teams.
- /inbox
Codex wants to run a command on npm run db:migrate.
DenyAllow onceIn a browser or terminal
Any browser, or a terminal on Linux or WSL.
Works with the agents and tools you already use
- Claude Code
- Cursor
- Codex
- Hermes
- OpenClaw
- GitHub
- Linear
- Jira
- Notion
- Slack
- Discord
- Telegram
- Teams
- Stripe
- Vercel
- AWS
- Terraform
- Postgres
Let them work.
Free on your machine, with no account.
Windows, Linux and Android too, each a little different from the Mac and iPhone. Get them
Start free- No AI decides what is allowed
- Secrets on your machine never leave it
- Every yes is signed, on any device
Open source: the Mac app, the iPhone app and the runtime are yours to read and build. Memnox Cloud and the released builds are ours.





