Overslash — Actions & auth gateway for AI agents

Your agent acts. Overs/ash controls.<br>One gateway to every service your agent touches. You decide: deny, approve once, or approve all.<br>Get startedread on↓

app.overslash.com / approvals<br>● connected<br>Workspace<br>⊟Agents<br>◫Services<br>✓Approvals3<br>☰Audit<br>⌘API<br>Admin<br>◉Users<br>⚙Settings

Approvals<br>3 waiting · auto-refresh 5s<br>Allow deploy-bot to create a pull request?<br>expires in 9m<br>Permission<br>github:create_pull_request:overfolder/appTitle: "Fix bug in payment retry logic"

Allow & Remember for all overfolder reposAllow onceDeny

Last action<br>2m agoagent:research-bot fetched github:list_repos — bubbled to henry<br>11m agoagent:ci-runner denied aws.s3.delete_object

What it doesOne gateway between your agent and everything else.<br>Overslash sits between agents and the outside world. It handles secrets, OAuth, MCP, permission chains, human approvals, and authenticated HTTP execution. The agent doesn't hold keys. You don't hold your breath.

Agent identities, in a tree<br>Every agent gets an identity, a parent, and a blast radius. Sub-agents inherit rules from their parent — until you narrow them.

Human approvals, on tap<br>The first time an agent wants a permission, you approve or deny. Allow & Remember at the scope ladder you choose.

OAuth & secrets, handled<br>One place for client IDs, tokens, signing keys. Rotate, revoke, per-agent. No credentials ever touch the agent's context window.

Audit that reads like prose<br>Every call, every bubble-up, every deny. Streaming, searchable, exportable.

MCP-native<br>Enroll any MCP client in a click — Claude Desktop, your own. Overslash brokers the tools, the credentials, and the approvals. The agent just asks.

Permission chains<br>A sub-agent bubbles up to its parent when it hits an unknown scope. Parents bubble to humans. Denials are first-class and recorded.

How it worksAgents ask. Overslash mediates. Services respond.<br>Any MCP-capable agent — Claude Code, Overfolder, OpenClaw, or your own — connects to Overslash once. Overslash holds the credentials, enforces the rules, and hands each service an authenticated, audited request.

agent:henryagent:deploy-botagent:research-bot

GatewayOvers/ashChecks rules. Injects credentials. Bubbles unknowns to parent agents or humans. Records every call.

authed request↓<br>Servicegithub.comReceives a normal authenticated request. Knows nothing about the agent.

IdentityOverslash stamps every outbound call with a deterministic actor.<br>RulesRules live at the gateway. Not in prompts. Not in code. Editable by a human in one click.<br>Bubble-upUnknown scopes escalate up the agent tree, then to a human. Denials are recorded.<br>AuditEvery call, response status, bubble, and approval is streamed to the Audit log.

IntegrationsA service registry your agent already knows.<br>First-class templates for the things agents actually touch. And a generic http service for anything else you can point a URL at.

GitHub<br>PRs, issues, actions

Slack<br>Messages, channels

AWS<br>S3, Lambda, IAM

Google Workspace<br>Drive, Gmail, Cal

Notion<br>Pages, databases

Linear<br>Issues, cycles

Vercel<br>Deploys, envs

PostgreSQL<br>Read, write, migrate

Any HTTP API<br>Generic service template

More landing soon<br>Stripe, Zendesk, Jira, Intercom

PricingFree in self-hosted. Cloud free for individuals. Paid for teams.<br>Three ways to use Overslash. Self-hosted gives you everything for free. Your Personal org on Cloud is free, forever. When you want to bring colleagues, create a Team org at €3 per seat.

SELF-HOSTEDFree<br>€0forever

Run it yourself. Full features — no gating, no license keys, no telemetry. Elastic License 2.0.<br>All features, no gating<br>Unlimited agents, actions, integrations<br>Local secrets vault<br>Clone the repo<br>PERSONALFree for one<br>€0forever

A hosted Personal org, just for you. Always free, no card required.<br>Personal org with all integrations<br>Hosted backups & upgrades<br>Personal audit log<br>All Cloud features for one user<br>Try Personal — free<br>TEAMPer seat<br>€3.63/ month<br>1 seat · Every seat: €3 · + 21% VAT<br>1 seat20 seats

Create Team orgs and bring your colleagues. Every seat €3. Your own Personal org stays free.<br>Everything in Personal<br>Multiple Team orgs<br>SSO (Google, GitHub, SAML)<br>Shared connections & secrets<br>Audit log export<br>Pooled usage with metered overages<br>Start a Team

OSS, research, or education? Email sales@overslash.com — we usually say yes.

Open sourceRead it. Fork it. Run it.<br>The gateway core is licensed Elastic 2.0. The services registry — the part the community contributes to — is MIT. No telemetry. No phone-home. Written in Rust and SvelteKit.<br>github.com/overfolder/overslashRead the docs<br>MIT · Elastic-2.0 · no telemetry

terminal~/overslash<br># clone, build, run — local dev<br>$ git clone https://github.com/overfolder/overslash<br>$ cd overslash<br>$ make install<br>$ overslash web

# ready on http://localhost:7171<br># signing key generated · audit db initialised<br># paste the enrollment link into your MCP client

Install · get startedGive this to your agent.<br>Paste the block below into...