Control you can show a risk committee. Before, during and after every run.

A marked action pauses only the task that asked for it, while the rest of the work carries on. An administrator approves or declines it in the control center or from an alert in Slack, Microsoft Teams or a webhook, and unanswered requests are raised again until someone decides.

Each decision records the answer, the account that made it and a fingerprint of the exact request.

Approval authority belongs to people. Within the team, the manifest names which member may carry out each outside action, so a member that writes a change is not the member that ships it.

The lead cannot sign off its own work. A member that made none of the deliverables opens every one against the written definition of done, and after repeated failures the run asks a person.

Each run carries a ceiling on model spend, checked between steps and before each model turn. When the run reaches it, the run pauses and asks a person whether to continue and to what figure.

Declared paid tool calls, such as media generation, are reserved against a limit before they leave your environment, so calls in flight count too.

Optional daily and monthly limits for each project and for the whole account cover spend across every run, plus what running work may still spend. A new run that would not fit is refused or given a smaller ceiling.

Model use is billed by Anthropic to your own API key, at Anthropic's prices. Agiliti meters nothing and marks nothing up.

Decide approvals and spend, manage connections and manifests, and delete runs. Every decision in the record names the account that made it.

Start runs and answer the questions those runs raise. Everyone signs in with a named account.

Start with no built-in tools. Everything a member can do comes from its grants in the manifest, and it acts only within them.

The control center accepts connections only from its own machine. To give a team access, place it behind your own TLS reverse proxy or tunnel, under your existing network controls.

Passwords hashed with scrypt, strict session cookies with idle and absolute timeouts, sign-in throttling, and default-deny routing on every request.

Tokens live in an encrypted credential store, never in the manifest and never shown back. Tool-server sign-in uses OAuth, so Alchemy never sees the password.

AES-256-GCM, record by record, covering run records, each step's context, prompts, transcripts, deliverables, memory, knowledge bases, the credential store and the user store.

The key is supplied from your secret manager or a key file you name, kept apart from the data it protects, and never logged, exported or passed to a process Alchemy starts. Encrypted data on a copied disk, in a backup or in an exported directory is unreadable without it.

Run records are kept until you decide otherwise. Large media files age out on a schedule you set, and a preview shows what a sweep would remove before it runs.

Only an administrator can delete a run, with a stated reason. Alchemy first writes a sealed summary of what was deleted, who deleted it, what it spent and which decisions were made, so the deletion itself stays on the record.

Each entry carries the hash of the one before it, so an edited, removed or reordered entry shows up when the chain is checked. The check runs without the encryption key.

Alchemy keeps what each agent is given at every step and logs each action on your systems as it is requested and as it completes. The record reflects what the system did, not the agent's own account of it.

Export a run as a self-contained bundle with a single digest over its contents. Keep that digest somewhere independent, and anyone can confirm the bundle is unchanged.

The record is yours, on your disk. Rebuild a run's full state from it, produce a decrypted copy with your key, and verify an export on any machine.

Send us your questionnaire and we answer it in writing, control by control. A runbook and a threat model come with the software.

Found a vulnerability? Our disclosure policy explains what is in scope and how to reach us.