Codex · Vardra workspaceConnected agent - 2 exact grants
ActiveLocal agent access control
The control room between agents and credentials.
Connect named agents, author exact grants, decide Ask-first requests, inspect every access event, and revoke authority from one native macOS surface.
Account API checkingDesktop version pending
Vardra Desktop
Claude Code · Client deliveryConnected agent - 1 Ask-first grant
ReviewCursor · Local sandboxConnected agent - No grants
BlockedRelease automationLocal workflow - Lease expired
RevokedExact agent grant
Billing health check
Codex · Vardra workspaceBilling test · API key
Reveal through executor
Ask-first
15 minutes · one use
Approve onceDenyRevoke grant
Backend connected
The page reads release state from the account API.
Desktop UX map
Every desktop action keeps the trust boundary visible.
Connect a named agent
Create an expiring local identity for Codex, Claude Code, Cursor, or another MCP-capable agent.
Grant one capability
Bind an exact secret field, action, TTL, use cap, and Auto-allow or Ask-first policy tier.
Decide higher-risk work
Approve or deny Ask-first requests on the same Mac while routine bounded work continues automatically.
Audit and revoke
Trace every request to a named agent and invalidate a grant or active lease before the next use.
Supported desktop
Vardra is focused on Apple-silicon macOS.
v0.1 desktop target
macOS
- Apple Silicon package
- OS keychain daily unlock
- Menu bar lock state
Launch path