Asks a person in Slack, Teams or email

Before an agent does something it can’t take back, a person gets asked.

Your rules decide what goes through, what waits for someone in Slack, Teams or email, and what is refused. Spend, approvals and a stop switch for every agent you run.

Start free Run the free check

Tell your AI agent:

Set up Immiscible for this project

How it worksor run npx immiscible try

9:43

# agent-approvalsAmethyst, a demo company

ImmiscibleApp09:41

Held it. The bank account changed by email, so @Priya decides this one.

Payment held

£18,400.00

to Kings Cross Couriers

Account: Changed

ApproveApprovedDeny

Waiting for Priya · decide by 09:41 tomorrow

Priya approved at 09:43. Signed.

Message #agent-approvals

Every team asks in its own channel. Every answer is the real decision.

Amethyst’s agents in Slack, one channel each. In #agent-approvals the finance agent asks to pay £18,400 to bank details an email changed this morning, and you decide, as Priya.

# finance

Demo company

Priya ShahFinance08:02

@Immiscible what have our agents spent in the last 30 days?

ImmiscibleApp08:02

£1,646 on AI in the last 30 days, at the providers’ prices for every call through Immiscible. Three keys have nobody watching them.

AI spend · 11 Sept to 10 Oct£1,646

GPT-5.5£850
Claude Sonnet 5£426
Claude Opus 4.8£354
Other models£16

3 of 4 keys unwatchedOpen the report

Jules Moreau09:41

@Immiscible finance ops says Kings Cross Couriers want paying today. Can you check it before anything moves?

ImmiscibleApp09:41

Held it. The bank account changed by email, so @Priya decides this one.

Payment heldKings Cross Couriers£18,400.00

Payee: Seen before, invoice 0874Known
Account: Ending 3318, not 7702 paid last timeChanged
Email: kingscross-couriers.coLookalike
Rule: Supplier invoices, asks above £5,000

Stop agent

Decide by 09:41 tomorrow, or it is denied.

Ada PryceEngineering14:01

@Immiscible can Claude Code run the migration from pull request 412 on production?

ImmiscibleApp14:01

Held. Claude Code wants to run a migration on production, so @Sam decides.

Command held · Claude Code

$ npm run migrate -- --env production

Asked from: Pull request 412
Target: The production databaseProduction
Why: It writes to production, so a person decides

ApproveDenyStop agent

Decide by 15:00, or it is denied.

Approved by Sam, 14:02. Signed.Open in the console

Sam OkaforPlatform14:02

Approved. We reviewed this migration this morning.

Vik SatoClient services17:05

@Immiscible can my renewals helper pull the team’s accounts and email them to my Gmail?

ImmiscibleApp17:05

It can read your own accounts; the team export and Gmail are outside its rule, so I refused both.

Vik’s renewals helperHis own agent, acts only for him

Read: His own accounts in the CRMAllowed
Export: The whole team’s accounts: not in its ruleRefused
Email: To his personal Gmail: not in its ruleRefused
Sees: Only Vik’s own agents and recordsJust his

Its own keyimm_ag_3b7d…RuleVik’s accounts

Edit ruleStop agent

12

Ada PryceEngineering11:30

@Immiscible the onboarding agent wants my payroll and bank details. What does it get?

ImmiscibleApp11:30

Your name, tax code and address went to the payroll provider under its rule; your bank account is restricted, so @Priya decides that one.

Vault release · Ada Pryce to payroll.example

Released: Legal name, tax code and home address, to payroll.exampleBy its rule
Withheld: Bank account: held back, as Payroll setup doesn’t name itRestricted
Asked: Priya Shah, FinanceWaiting

ApproveDenyStop agent

Decide by 17:00, or it is denied.

12

Nia ReyesSecurity16:20

@Immiscible did the support agent’s renewals export go out?

ImmiscibleApp16:20

Refused. The support agent wanted every customer’s details for renewals, and its rule covers support only.

Data export refused · Support agent

Fields: Customer name and email
Going to: sheets.exampleNot in its rule
Rule: Support only, to the help deskSupport

Refused by its rule at 16:20. Nothing was sent.Open in the console

21

Nia ReyesSecurity16:24

Good. Renewals can have the counts, not the list.

Sam OkaforPlatform16:12

@Immiscible why has the ticket triage agent gone quiet?

ImmiscibleApp16:12

Stopped the triage agent. A loop made 1,912 calls in ten minutes and went past its budget of £40 an hour.

Agent stopped · Ticket triage£41.20

Spent this hourBudget £40

Calls: 1,912 in ten minutesLoop
Stopped: 16:12, by its own budget
Since: Nothing it asked for went ahead

Restart in the console

Sam OkaforPlatform16:15

Found it: a retry with no limit. Fixed, restarting now.

Works with 10,000+ tools your agents already use.

We don’t build agents; we govern the ones you run. Put us in front of any remote MCP server, or let Zapier, n8n, Make and Copilot Studio stop and ask us first.

Logos identify the services Immiscible connects to. Naming them implies no partnership or endorsement.

The agent you made yourself is welcome here.

It runs on its own key and budget, reaches only what its rule names, and one button stops it. We govern what it sends through us, not the laptop it runs on.

Sam Okafor’s own codeDemo company

Client support

Key: Its own, made for it alone
Budget: £50 a month, its own
Rule: Client refunds: up to £1,000 each and £10,000 a day, through stripe.com only; asks above £250; anyone new is refused

15:40Stopped by Priya Shah

15:46Model callRefused
16:03Xero credit noteRefused
16:21Card refund, £310.00Refused

A person is asked before anything risky.

What every agent costs, priced call by call.

Each agent and each team, at the providers’ prices for every call through Immiscible, then checked against your OpenAI or Anthropic bill. We read the bills, not your prompts.

Run the check on your own bills

SpendDemo company

AI spend, last 30 days

£1,646£1,434

11 Sept to 10 Oct, from Amethyst’s OpenAI and Anthropic usage, as the free check reads it

Spend by model, 30 days
Model	Share	30 days
GPT-5.5		£850£850
Claude Sonnet 5		£426£426
Claude Opus 4.8routing moves it to Claude Sonnet 5		£354£142
Mistral Large 3		£15£15
Gemma 4 27B (open weights)		£1£1

Before we asked anyone to trust it, we tried to fool it.

£13.4m stopped, £2.5m got past, in 300 simulated companies.

The worst was duplicate invoices: 69% stopped.

What got past, and why

A record your auditor can check without us.

An agent shouldn’t mark its own homework. Change one pound on this receipt and check it again, in your own browser.

Signed into a hash-chained ledger before the agent hears back (Ed25519, keys we publish).
Provider keys sealed with AES-256-GCM; prompts kept as fingerprints, not words.
No SOC 2 report or outside pen test yet; data in Frankfurt. Where we stand

ReceiptEd25519, demonstration key

Amount, edit me

Paid to
Currency
Approved: Priya Shah approved at 09:43 in SlackFinance opsSupplier invoices

Show signature

kid  jCkF71_Nhw...wMwg
sig  PlClQ_-ESaUQ...-3BuAA
prev 1717cf...ec9e
hash b40fe7...07fa

Change the amount, then verify.

Questions

Built by Eóin Forker in Oxford. Write to me and I’ll answer.

Still have a question? Talk to Eóin.

Is Immiscible an agent?

No. We don’t build agents; we govern the ones you run, whoever made them. Agent companies are partners, not rivals.

What happens when nobody answers?

The request is denied at its deadline and nothing moves. The decision is still signed and recorded.

Which agents does it work with?

Any agent that reaches its models through our gateway or its tools through our MCP proxy, whoever built it; agents written on a framework or SDK ask through our API before they act.

What if Immiscible is down?

Nothing risky slips through: on the gateway, the MCP proxy and the card rail the agent has no other way to act, and the Claude Code hook fails closed.

Can we govern the agents our own engineers write?

Yes. npx immiscible init adds an agent, a rule and the Claude Code hook to a project and makes a live test call, so a coding agent asks before it acts.

How is it priced?

By the agents we govern, never the people. Free for three agents, then Team at £39 a month, billed yearly, for ten. Approvers and auditors are free. Never a share of spend.