← All features

Coding agents

Your agents ask. You answer from the notch.

Claude Code stops to ask before it runs a command or edits a file, often in a tab you’re not looking at. Airlock brings the question to the notch: yes, no or always.

Airlock is a Mac app for MacBooks with a notch. On your phone? Send yourself the link and open it on your Mac.

Free plan, no card needed · macOS 26 or later · Apple silicon

Airlock open under a Mac’s notch: Claude Code asking to run npm test, with Approve, Deny and Always
A request from Claude Code, answered from the notch

How it works

  1. 1

    Connect once

    In Settings › Agents, click Connect. Airlock adds its hooks beside yours, and removes only its own if you disconnect.

  2. 2

    Get on with your day

    When Claude Code needs a yes or asks you a question, the request comes up in the notch. Several wait their turn, oldest first.

  3. 3

    Answer from the notch

    Approve with ⌘Y, Deny with ⌘N, or Always to make it a rule. Esc hands it back to the terminal.

Answer

Say yes without leaving what you’re doing.

storefrontClaude Code · iTerm

You: run the tests and fix what fails

npm test -- --watch=false

Needs you

storefront/.airlock/policy.yaml

allow: # runs without asking - Bash(git status) - Bash(npm run *) deny: # never runs - Bash(git push *)

Always writes one plain line. Force pushes, sudo and deleting folders ask every time, and Always isn’t offered for them.

A * stands for anything, and never-run rules win over the rest. Rules live in your project, or in your home folder for everywhere. Edit them in Settings or by hand.

The details

See the change first
When Claude Code wants to edit or write a file, you see the new text before you say yes.
Questions too
When Claude Code asks you to choose, every option is in the notch, with room to answer in your own words.
Back to the right place
Jump to the exact session in iTerm2 or Terminal, or the exact pane in tmux. Other apps are brought to the front.
Claude’s limits
Your 5-hour and weekly usage, with a warning as you get close.
Codex too
Airlock shows when OpenAI Codex is working and when it’s your turn. You answer Codex’s requests in its own terminal.
Fails safe
If Airlock isn’t running, your agents carry on and ask in the terminal as usual. Waiting never approves anything.

Privacy

What stays on your Mac

Airlock talks to Claude Code over a local connection on your Mac. The privacy page lists every request Airlock makes.

Stays on your Mac

  • Each request: the command or the file it’s about
  • Your rules, in plain policy.yaml files
  • The list of recent requests

Leaves your Mac

  • Nothing. Your code and your prompts are never sent anywhere.

Settings

It starts out like this. Everything is in Settings › Agents.

Reach the waiting request from any app
⌘⇧A
Approve
⌘Y
Deny
⌘N
Pick an answer
⌘1 … ⌘9
Send your answer
⌘Return
Hand it back to the terminal
Esc

You can change ⌘⇧A in Settings › Agents. Always has no key, on purpose.

  • Answer with a shortcut⌘⇧A answers the waiting request
  • Warn me near Claude’s limitOnce per window, as you get close
  • Say when it resetsWhen your 5-hour or weekly window starts again
  • Hand the question back after5 minutesThen Claude Code asks in the terminal
  • SoundAirlockWhen a request arrives. Six others to choose from.

Which plan

Free

€0

Answer one coding agent at a time from the notch. Others ask in their own terminal. The safety rules cover every agent.

Plus

€3.99 a month

Answer every agent from the notch.

Pro

€7.99 a month

The same as Plus: every agent, from the notch.

It asks for: Claude Code or Codex. Nothing on your Mac.

Compare the plans →

Questions

Does Airlock see my code?

It sees the request itself, such as the command Claude Code wants to run, so it can show it to you. That stays on your Mac: Airlock talks to Claude Code over a local connection, and never sends your code or prompts anywhere.

What if I’m away from my Mac?

A request nobody answers goes back to the terminal after 5 minutes, and Claude Code asks there as usual. Waiting never approves anything.

Which commands always ask?

Deleting folders, sudo, force pushes, hard resets, wiping a disk, piping a download into a shell, dropping a database and production deploys. These can’t be turned into rules.

Does it work with Claude Code’s auto modes?

Yes. In those modes a request shows only when Claude Code itself would ask.

Is Airlock made by Anthropic?

No. Airlock is an independent app that works with Claude Code.

More in the notch

Look up.

Notarized by Apple · macOS 26 or later · Apple silicon
or brew install --cask gdelolmo7/tap/airlock