AI review · Optional paid feature
Give routine requests a reviewer.
Let cloud AI consider requests using your instructions. Expected work can proceed without a tap; requests that need your judgment can come back to you.
- Approve
- The request can proceed automatically.
- Deny
- That request ends without access.
- Ask you
- Read the explanation, then allow or deny on your phone.
AI can make mistakes, including approving unsafe requests or denying legitimate ones. An AI approval can let an operation proceed without asking you.
Your instructions
Describe the work you expect.
Explain what a credential is for and which uses need your attention. The reviewer considers three scopes of instructions together.
- Global
- Expectations shared across your requests.
- Client
- The role of the computer asking for access.
- Secret
- The intended use of this credential.
This secret is for diagnostics on the staging database.
Allow identity and service health checks that do not change data.
Ask me before changes, exports, or an unfamiliar destination.
Ask me when the command or its reason is unclear.Instructions guide an AI decision. The credential’s own permissions still determine what a process can do after receiving it.
Cloud review
Know what the reviewer sees.
Your phone sends request context to a cloud review service and model provider. You can inspect the AI explanation in the request’s details on your phone.
- Sent for review
- Client and secret names, instructions, command and reason, non-sensitive variable values, and context for SSH authentication or Git signing.
- Excluded from review
- Sensitive environment values and private keys stored in their designated fields.
Credentials pasted into commands, reasons, or instructions become part of the review context. Keep secret values in fields marked sensitive.
Choose where AI gets a say.
With paid AI access active, select AI mode for the secrets and clients you want reviewed. An active temporary grant skips review for the access it covers.
If AI access expires or review is unavailable, affected requests ask you instead. Your modes and instructions remain saved. For manual review, select Ask and end any temporary grants for that secret and client.