Product / Control
Only the access the job needs.
Each agent gets its own keys, its own limits and its own budget. Reading is allowed; anything that spends money, emails a customer or changes a record waits for a person to say yes.
- Read only
Stripe
Read subscriptions, invoices
- Asks first
HubSpot
Read companies · create tasks
- Asks first
Slack
Post to #revenue
- $0.31 used
Budget
Stops at $5.00 a week
What Control does
01
Scoped keys per agent
An agent that reads Stripe can't refund in Stripe unless you say so. Keys are never shared between agents.
read · ask first · allowed
02
Approval routing
Refunds over $50 go to a lead, under $50 to anyone on support. Route by amount, team or customer.
Business and Enterprise
03
Everything on the record
Every approval, edit and no is kept with who did it and when, in the audit log for 400 days.
exportable · SIEM-ready
Nothing ships without a yes.
Pick the steps that need a person. Capstan asks in Slack, Teams or email with the draft attached, and waits. Approve, edit or say no; edits are kept and teach the next run.
Overdue invoice follow-up· email
Send 7 reminders from billing@
Refund requests under $50· Zendesk
Refund $24.00 and reply on #48213
Weekly churn digest· #revenue
Post the summary: 31 accounts, $18.4k MRR
A budget it can't overspend.
Each agent has a weekly limit in dollars. At the limit it stops, mid-run if it must, and tells its owner. Teams on Business get a budget per team too.
this week$3.12 / $5.00
stops at the limit · tells the owner