BehalfID
Sign inStart building
Authority for AI agents

Give AI agents freedom.Keep their authority controlled.

Every agent gets an identity, a clear scope and a decision before it acts. BehalfID learns from human decisions to make that control more precise over time.

Start building See how it works
Request
Cursor agent
acting for Maya Okafor

Deploy payments API to production

Request received

Built for teams running agents in real workflows

  • Coding agents
  • Deployment automation
  • MCP tools
  • Financial actions
  • Internal operations

One path, from request to action.

Nothing an agent does skips a checkpoint. Routine work passes without friction; risk stops and waits.

  1. Agent

    Cursor agent, acting for Maya

  2. Identity

    Named, owned, revocable

  3. Permission

    Deploy · staging allowed

  4. Approval

    Production waits for a person

  5. Action

    Authorized, scoped, recorded

Routine actions pass without stoppingSensitive actions wait for a person
Adaptive mode
Beta

Human decisions become better defaults.

Every approval and decline gives BehalfID more context about how your team handles risk. Over time, the engine can recognize recurring patterns, improve recommendations and reduce unnecessary interruptions—without overriding the policies you set.

Explicit permissions and organizational policy always remain in control.

Decision historyIllustrative

1 similar decisions observed · approvals and declines both count as evidence

Release Bot asks to run a production database migration.

Pattern confidence
Insufficient evidence
Handling today
Approval required
Policy
Authoritative
Suggested handling

Not enough comparable decisions yet. Requests keep following the policy you defined, and the engine keeps watching.

Observe. Recommend. Enforce — only when a person says so.

Adaptive mode observes how authorized humans decide recurring requests. It uses those decisions to surface policy recommendations and, when explicitly enabled, handle well-understood cases with less interruption.

Step 1

Observe

Decisions and their context are recorded. Nothing about runtime behaviour changes.

On by default
Step 2

Recommend

Repeatable patterns are surfaced as a proposed rule, with the decisions behind it.

Review in the console
Step 3

Enforce

An administrator enables a recommendation before it can affect a single decision.

Explicit opt-in

BehalfID does not silently expand an agent’s permissions. Learned patterns become bounded recommendations or administrator-enabled rules, and every one of them can be reviewed, audited or turned off.

How adaptive mode works
Evidence

Every approval becomes evidence.

Patterns cover the whole decision surface: what should keep waiting for a person, what is consistently declined, who should review it, and when a request no longer looks like the ones approved before.

Pattern detected

Illustrative

Production database migrations have been approved 8 times when requested by Release Bot during scheduled deployment windows.

Review recommendationKeep requiring approval

Repeated decline

Illustrative

Requests to expose public database ports have been declined 5 times.

Add explicit deny ruleDismiss

Reviewer routing

Illustrative

Infrastructure changes are consistently routed to the Security Lead.

Set default reviewerDismiss

Behaviour change

Illustrative

This request differs from previously approved deploys because it adds a new external destination.

Continue requiring approval

Autonomy should not mean unlimited authority.

Identity

Every agent should answer for itself.

Replace shared credentials with named identities, scoped authority, and a complete record of who acted.

Cursor agent

Owned by Maya Okafor · Engineering

Active
Environment
development, staging
Authority
Deploy, read secrets, open PRs
Recent action
Merged release branch · allowed
Beyond scope
Production deploys, refunds over $500
Every action answers to this identityEvery decision kept as evidence
Permissions

Authority should be explicit.

Scope is a boundary, not a setting buried in a policy file. Inside it, agents move. Outside it, they ask.

Environment
Development
Allowed

Inside scope. Nothing to ask.

Environment
Staging
Allowed

Inside scope, spend capped at $500/day.

Environment
Production
Approval required

Outside scope until a named human says yes.

Approvals

Routine work flows. Risk waits.

Cursor agent
Allowed instantly

Open a pull request on the checkout service.

No one had to be interrupted

See every action. Understand every decision.

Open the dashboard
OverviewSample workspaceIllustrativeLast 24 hours
3
Pending approvals
142
Actions verified today
9
Active agents
Verification volumeLast 14 days
Outcomes
Mostly allowedSome approved by a personA few denied
Recent actions
Deploy payments API
Cursor agent
Awaiting approval
Merge release branch
Release bot
Allowed
Rotate database secret
Ops assistant
Denied
Issue refund · $240
Billing agent
Allowed
Developers

One decision before the action.

Drop the SDK into the code path that performs the action. No proxy, no sidecar, no migration.

Read the quickstart 
import { behalf } from "@behalfid/sdk";

const decision = await behalf.verify({
  agent: "cursor-agent",
  action: "deploy_service",
  resource: "payments-api",
});

if (decision.allowed) await deploy();
Decision
{
  "allowed": false,
  "reason": "production requires approval",
  "approval": "requested",
  "decidedBy": "Engineering Lead"
}

Default to no. Allow with intent.

Evaluated before execution
Every sensitive action is decided before it can take effect.
Scoped, single-use approvals
An approval covers one request and expires on its own.
Decision logs
Allowed, denied or approved — with who decided, the policy path, and why.
Managed profiles
Reusable controls for coding agents at the tool boundary, including pause and required modes.
No inherited authority
Agents never receive more reach than they were granted.

Give agents room to work.Keep the final say.

Start building Talk to us