remoteagent.online  the open-source control plane for secure, cost-controlled AI agents

Capability grants - give an agent exactly enough power

Grant agents only the capabilities a task needs, for a bounded time. Power is granted, never assumed.

Updated 2026-08-24Reading time 5 min

Why grants

A support agent needs your inbox. It does not need your shell. Grants make that difference explicit and machine-checked.

What you can grant

  • Files and folders - read or write, per path
  • Tools and commands - allowlisted executables
  • APIs - hosts and endpoints, with rate limits
  • Budget - tokens or currency, per day and task
  • Time windows - hours and expiry dates

Expiry by default

Every grant has an expiry. Time-boxed power means a forgotten grant cannot become a permanent backdoor.

Grants in the audit log

Each grant, change and use is recorded. Auditors see exactly who granted what, when and why.

Next

Pair grants with hard budget caps.

RemoteAgent Online - 100 solutions · Blog · mona.expert · Sign in free