Skip to content

Questions people ask

No. Apps are connected once in Keystile Automations and stored encrypted. Your AI tool signs in to Keystile, and Keystile does the work with the connection. Remove an AI tool’s access in one click without changing any password.

To the apps you connected, and to your AI tool for the parts it needs. Client identifiers such as Social Security and account numbers are masked or stopped before they reach the AI tool. Keystile can run on your own servers or in your own cloud account.

Every action it checks: which agent (and for AI tools, whose access), the app and action, the decision and why. The record is signed so any later change is detectable. For apps you put a budget on, it also records what each call cost; apps without a budget leave no spend record.

Actions are refused, never run unchecked.

Can an agent approve its own action or change the rules?

Section titled “Can an agent approve its own action or change the rules?”

No. Approvals and policy changes are for signed-in people only, and every policy change needs a second person.

Any tool that supports remote MCP servers with sign-in: Claude, Claude Code, Cursor, ChatGPT, VS Code, Windsurf and more. See Connect your AI tool.

Over 750, including Microsoft 365, Google Workspace, Salesforce, HubSpot, Wealthbox, GitHub, Slack, Stripe, QuickBooks, DocuSign, YouTube, TikTok and Instagram. Ask us about one you don’t see.

Keystile’s approach is patent pending.