Welcome to Permaura
Permaura is a permission layer for AI agents. Its one-line promise: give agents permission, not secrets.
Your AI agents — Claude Code, Codex, Cursor, ChatGPT, remote MCP agents — increasingly need to do things: refund a charge, deploy a branch, query a database, send an email. The naive way is to hand the agent an API key. The moment you do, the secret lives in the model's context, its logs, and its blast radius.
Permaura sits in between. The agent calls a capability (braintree.transactions.refund), Permaura checks policy, injects the real secret server-side on your gateway, performs the action, and returns only the result. The key never reaches the model.
Think 1Password + a policy engine + an MCP gateway, with a local-first trust anchor and an optional cloud you only reach for when you want to.
How to read these docs
Read the first three sections in order; dip into the rest as you need them.
| Section | What it covers |
|---|---|
| Concepts | The enforcement loop, the four objects you'll work with (Connection, Policy, Grant, Agent), and where your gateway can run. |
| Get started | The end-to-end path: create an account → connect a gateway → add a connection → connect an agent → grant it access. With a screenshot of each step. |
| Console tour | A page-by-page walk through the console — dashboard, agents, connections, policies, grants, approvals, the audit log, and the vault. |
| Security & access | Human approvals and device-signed approvals, two-step verification, and how organisations and workspaces fit together. |
| Plans & billing | What each tier unlocks, the free trial, and managing your subscription. |
| Admin | Protocol-level runbooks for operators — driving the gateway's raw REST API directly, underneath the console. |
Demo accounts
Every screenshot in this guide was captured against the live console with these throwaway demo accounts. Sign in with either to follow along — both start in demo mode, so you see a fully working console populated with sample data before you connect anything real.
| Name | Password | |
|---|---|---|
| Ada Lovelace | ada.demo@permaura.com | DemoPass2026! |
| Grace Hopper | grace.demo@permaura.com | DemoPass2026! |
In demo mode the console shows sample agents, connections, grants, and approvals so you can explore safely. Every action works, but nothing is written and nothing is real. The moment you connect your own gateway, the console switches to your live data — see Go live.
Prefer to start clean? You can skip the demo entirely and go straight to connecting a gateway.