API access for AI agents,
under your control

Corevisor manages credentials, enforces approval rules, and logs every API call your AI agents make.

Get started View on GitHub
$ cv login --hub-url https://corevisor.xyz
Open this URL to authorize: https://corevisor.xyz/login?device_code=AXKM-WNRJ
Authenticated as [email protected]

$ cv serve --profile production
MCP server ready · profile: production · 3 services
allow     GET   api.github.com  /repos/acme/api
await     POST  api.stripe.com  /v1/charges · waiting for approval...
approved POST  api.stripe.com  /v1/charges · 200
deny     DELETE api.github.com /repos/acme/api · blocked by rule

Everything you need to let AI use your APIs safely

One tool between your AI agent and your API keys.

>_

MCP server

Drop-in MCP server for Claude and other AI tools. Run cv serve and your agent gets controlled API access through a standards-based gateway.

#

Credential vault

API keys stored in your OS keychain with zero-knowledge encrypted backup. Credentials are injected into requests automatically — your agent never sees the raw key.

?

Approval rules

Fine-grained rules by HTTP method and path pattern. Allow reads, require approval for writes, block destructive operations — per service.

Live activity feed

Real-time stream of every API call with method, path, status, and the context your agent provided for why it made the request.

{}

API catalog

Register OpenAPI specs and your agent can search endpoint documentation on its own. It knows what's available before it asks.

Sandboxed execution

JavaScript runs in a WebAssembly sandbox. Network requests are gated through the approval engine. No breakouts, no surprises.

How it works

1

Create a profile

Add your API services and store credentials. Group them by project, team, or environment.

2

Set the rules

Define approval rules with method and path patterns. GET /repos/* can be auto-allowed while DELETE * is blocked.

3

Start the MCP server

Run cv serve and point your AI tool at it. Credentials and rules apply automatically.

4

Monitor and approve

Watch the live activity feed. Approve or deny requests that need your sign-off from the dashboard.

Start controlling your AI's API access

Free to use. Self-hostable. Open source.

Create an account