Okay Seal

build …

Starting…

…

On-device key safe · Mac preview

Master keys stay in a separate native, device-protected safe. They never enter this app’s cloud vault or agent responses. No cloud sync or recovery; keep your own recovery copy.

Checking protected storage…

Connect this computer.

Use a different server

Workspace address

Only change this if your company runs its own Okay Seal instead of okayseal.com.

Or paste a code instead

Server Pairing code

Waiting for you

Not asking you right now

…

Your agents can only run commands you have approved. Anything new interrupts you here first, and you can say no. Nothing listens for incoming connections — this computer dials out.

Terminal access

…

Commands from agents

…

Missions on this computer may also use (each mission has to ask for it too). Saved as soon as you tick a box.

Shells and scripting
bash, cmd, powershell, wsl: any command at once; each run is recorded only by the shell's name Run as administrator
sudo/runas: the machine itself, not just your files; Windows still shows its own prompt Network and transfer tools
curl, wget, ssh, scp: how data leaves this computer or reaches another System settings and disks
permissions, services, scheduled tasks, disks, shutdown

Approved on this computer

Nothing yet — which is the right place to start. The first time an agent asks for something, you will see exactly what it wants and can allow it once, always, or not at all.

Recent

Nothing has happened yet.

Okay Seal

Approved on this computer

Recent

This computer