Check before your AI agent acts

Jithox checks an action before your AI agent performs it.

1. 1. Describe the action

   Pick what the agent wants to do, say where and for whom, and what could happen.

2. 2. Check permission, risk and budget

   Jithox compares that with the permissions, the authority, the budget and the approval that already exist.

3. 3. Give your agent only the safe next step

   One clear answer, with what may be prepared and what must wait for you.

What that looks like

• —Draft an e-mail, but do not send it.
• —Build a product listing, but do not publish it.
• —Prepare a Freelancer proposal, but do not submit it.
• —Inspect an authorised ZIP, but do not scan an external target.
• —Prepare a purchase, but do not pay.

What is true on this page

• —Preflight executes nothing.
• —A preparation decision is not execution permission.
• —Receipts are currently unsigned.
• —No credential should be entered.
• —Unavailable is not approval.
• —Changing an action changes its actionHash.
• —External actions require separate authority.

Price: the interactive and local preflight is free. API pricing is not published; nothing is charged in this build. Jithox checks; it never executes. Status: preview local build.

For developers and AI agents

Three versioned, compute-only routes over one closed schema. The same rule your browser just ran.

HTTP API

GET /api/agent-preflight/v1/schema

Schemas, action types, decisions, reason codes, limits, MCP tool contract, client exports. public, max-age=300.

POST /api/agent-preflight/v1/evaluate

One planned action in; one bounded decision with reasons, missing requirements and a hash-bound receipt out. no-store.

GET /api/agent-preflight/v1/fixtures

The seven team demonstrations with their evaluated results. public, max-age=300.

Closed vocabularies

decisions

ALLOWED_TO_PREPARE · HUMAN_APPROVAL_REQUIRED · BLOCKED · UNAVAILABLE

actionTypes

read_data · modify_local_files · inspect_offline_artifact · send_message · publish_content · publish_product · purchase · refund · submit_proposal · accept_contract · security_test_external · change_production

dataClassifications

public · internal · confidential · personal · payment

reversibility

yes · no · unknown

authorityKinds

none · owner_instruction · standing_grant

agentClients

claude · chatgpt · gemini · grok_cursor · generic_mcp · generic_http · other

clientExportStatuses

CERTIFIED · CONFIG_READY · NOT_CERTIFIED · MCP_HOST_PENDING

The twelve action types

• read_data · Read data · local · authority none
• modify_local_files · Change local files · local · authority none
• inspect_offline_artifact · Inspect an artifact offline · local · authority required
• send_message · Send a message · external · authority none
• publish_content · Publish content · external · authority none
• publish_product · Publish a product · external · money · authority required
• purchase · Buy something · external · money · authority required
• refund · Issue a refund · external · money · authority required
• submit_proposal · Submit a proposal · external · authority none
• accept_contract · Accept a contract · external · money · authority required
• security_test_external · Test a system for weaknesses · external · authority standing grant required
• change_production · Change a live system · external · authority required

Example

Example request — Buy something: 2 × EXAMPLE-thermal-label-printer at EUR 89.00

{
  "schemaVersion": "jithox.agent-action-preflight-request/v1",
  "action": {
    "type": "purchase",
    "target": {
      "kind": "merchant_order",
      "id": "EXAMPLE-shop|TLP-2026|v2026.09"
    },
    "summary": "Buy 2 × EXAMPLE thermal label printer (product version 2026.09) from EXAMPLE-shop.example: item EUR 89.00 each, shipping EUR 6.90, VAT EUR 38.83 (21%), total EUR 223.73; maximum total EUR 230.00; refundable within 14 days per the merchant's terms."
  },
  "agent": {
    "id": "commerce-bot",
    "client": "claude"
  },
  "owner": {
    "ref": "owner:jithox",
    "workspaceRef": "ws:commerce"
  },
  "requestedPermissions": [
    "read",
    "spend_money"
  ],
  "dataClassification": "payment",
  "money": {
    "maxAmountMinor": 23000,
    "currency": "EUR"
  },
  "externalSideEffect": true,
  "reversible": "yes",
  "authority": {
    "kind": "standing_grant",
    "ref": "grant:commerce-supplies-2026-q3",
    "scope": "Office and shipping supplies from approved merchants",
    "expiresAt": "2026-09-30T00:00:00Z",
    "budget": {
      "maxAmountMinor": 50000,
      "currency": "EUR"
    }
  },
  "humanApproval": null,
  "idempotencyKey": "commerce-buy-TLP-2026-09-10",
  "requestedExpiresAt": "2026-09-10T14:00:00Z",
  "evidence": [
    {
      "id": "ev-merchant-listing",
      "kind": "merchant_listing",
      "ref": "artifact:listing-TLP-2026"
    },
    {
      "id": "ev-price-quote",
      "kind": "price_quote",
      "ref": "artifact:quote-TLP-2026-09-10"
    },
    {
      "id": "ev-cancellation-terms",
      "kind": "merchant_terms",
      "ref": "artifact:terms-EXAMPLE-shop"
    }
  ]
}

Example response — Evaluated on the fixed clock 2026-09-10T12:00:00Z, so the answer is the same every time.

{
  "ok": true,
  "status": "preview_local_build",
  "result": {
    "schemaVersion": "jithox.agent-action-preflight-result/v1",
    "policyVersion": "jithox.agent-action-policy/v1",
    "status": "preview_local_build",
    "preflightId": "apf_302c33f5fbddad3c",
    "decision": "HUMAN_APPROVAL_REQUIRED",
    "reasonCodes": [
      "external_execution_unsupported",
      "approval_missing",
      "data_classification_requires_approval"
    ],
    "reasons": [
      {
        "code": "external_execution_unsupported",
        "message": "Jithox does not execute external actions. This preflight can allow preparation and bind an approval; the execution step stays with an official connector after approval."
      },
      {
        "code": "approval_missing",
        "message": "\"Buy something\" has an external side effect: the owner must approve this exact action (its hash)."
      },
      {
        "code": "data_classification_requires_approval",
        "message": "The action touches payment data."
      }
    ],
    "missingRequirements": [
      {
        "code": "approval_missing",
        "requirement": "Ask the owner to approve action hash 302c33f5fbddad3c912b04809f3016004e0c1ea3bb1f1664f2d8a68b5fa2dc7c before the expiry."
      }
    ],
    "allowedPreparationSteps": [
      "Assemble the exact item, price, fees, currency and cancellation terms.",
      "Compute the complete total."
    ],
    "prohibitedExecutionSteps": [
      "Placing the order. (never here; only through an official connector after approval)",
      "Paying. (never here; only through an official connector after approval)"
    ],
    "approvalRequired": true,
    "approvalStatus": "missing",
    "budget": {
      "relevant": true,
      "maxAmountMinor": 23000,
      "currency": "EUR",
      "standingBudgetMinor": 50000,
      "withinStandingBudget": true,
      "note": "Within the standing budget; the owner still approves this exact action."
    },
    "expiresAt": "2026-09-10T14:00:00.000Z",
    "actionHash": "302c33f5fbddad3c912b04809f3016004e0c1ea3bb1f1664f2d8a68b5fa2dc7c",
    "evidence": {
      "supplied": [
        "ev-merchant-listing",
        "ev-price-quote",
        "ev-cancellation-terms"
      ],
      "preflightId": "apf_302c33f5fbddad3c"
    },
    "replayProtection": {
      "scope": "process_memory",
      "durable": false,
      "idempotencyKey": "commerce-buy-TLP-2026-09-10"
    },
    "receipt": {
      "kind": "agent_action_preflight_receipt",
      "signature": "unsigned_hash_bound",
      "algorithm": "sha256-canonical-json",
      "digest": "55b77b2e19fb415ec2a24090627e57f1498f566242f3174af860206d6a803ea2",
      "boundTo": {
        "actionHash": "302c33f5fbddad3c912b04809f3016004e0c1ea3bb1f1664f2d8a68b5fa2dc7c",
        "decision": "HUMAN_APPROVAL_REQUIRED",
        "policyVersion": "jithox.agent-action-policy/v1",
        "evaluatedAt": "2026-09-10T12:00:00.000Z",
        "preflightId": "apf_302c33f5fbddad3c"
      },
      "note": "This receipt is NOT signed. It is bound by a sha256 digest over the canonical decision; anyone can recompute it. A signed receipt needs the fleet's Ed25519 key, which this website does not hold."
    },
    "executed": false,
    "evaluatedAt": "2026-09-10T12:00:00.000Z"
  },
  "executed": false,
  "stored": false
}

Reason codes

unknown_action_type

The action type is not one of the twelve known types.

target_missing

The action names no target.

expiry_invalid

The requested validity is not a valid date and time.

expiry_in_past

The requested validity is already in the past.

expiry_clamped

The requested validity was longer than the maximum and was shortened.

permission_missing

A permission this action needs was not requested.

permission_excessive

More permissions were requested than this action needs.

external_execution_unsupported

Jithox does not execute external actions; the execution step stays with an official connector after approval.

authority_missing

No instruction or grant allows this action.

authority_expired

The instruction or grant has expired or has no valid expiry.

authority_scope_missing

The grant has no scope.

authority_scope_not_immutable

The scope must be recorded as unchangeable first.

budget_missing

The action involves money, but no maximum amount and currency were given.

budget_exceeded

The maximum amount is above the standing budget.

currency_mismatch

The currency does not match the standing budget, or an amount was given for an action without money.

no_standing_budget

There is no standing budget, so any amount needs the owner's approval of this exact action.

irreversible_requires_approval

The action cannot be undone once performed.

reversibility_unknown

Whether the action can be undone is unknown.

data_classification_requires_approval

The action touches sensitive data.

approval_missing

The owner must approve this exact action.

approval_expired

The approval has expired or has no valid expiry.

approval_hash_mismatch

The approval belongs to a different action.

approval_not_yet_valid

The approval's start is in the future.

approval_valid

The owner approved exactly this action.

duplicate_action

This action key was already used for a different action.

dedupe_store_unavailable

The replay store did not answer, so a duplicate cannot be ruled out.

evidence_missing

Attach the quote, invoice, listing or contract the amount comes from.

Copyable configuration

A snippet is not a certified client. Every integration carries its honest label.

CERTIFIED

:

executed end to end against the real endpoint in this build, with evidence

CONFIG_READY

:

the configuration is complete and validated; it has not yet been run end to end by a real client in this build

NOT_CERTIFIED

:

attempted and not proven, or not attempted

MCP_HOST_PENDING

:

the contract is complete; the MCP host that would serve it does not exist yet

• Claude Code CONFIG_READY

  Add the rule below to the project's CLAUDE.md. Claude Code runs the curl through its Bash tool and reads the decision before it drafts or asks for approval.

  Copy Claude Code
  CLAUDE.md

  ## Jithox Agent Action Preflight
  
  Before any action that sends, publishes, buys, submits, accepts, tests or changes something outside the workspace:
  1. POST the planned action to https://jithox.com/api/agent-preflight/v1/evaluate (schema: https://jithox.com/api/agent-preflight/v1/schema).
  2. Act only on ALLOWED_TO_PREPARE. On HUMAN_APPROVAL_REQUIRED, show the owner the actionHash and stop. On BLOCKED or UNAVAILABLE, stop and report the reason codes.
  3. Never execute the external step yourself; Jithox does not execute either. Hand an approved hash to the official connector.
  4. Never put a credential, key or personal detail in the request; the endpoint refuses them.
  
  Command:
  
  ```bash
  curl -s https://jithox.com/api/agent-preflight/v1/evaluate \
    -H 'content-type: application/json' \
    -d '{"schemaVersion":"jithox.agent-action-preflight-request/v1","action":{"type":"send_message","target":{"kind":"email","id":"customer:EXAMPLE-1"},"summary":"Reply to the customer's question."},"agent":{"id":"my-agent","client":"claude"},"owner":{"ref":"owner:me"},"requestedPermissions":["read","draft_messages","send_external_messages"],"dataClassification":"internal","money":null,"externalSideEffect":true,"reversible":"no","authority":{"kind":"none"},"humanApproval":null,"idempotencyKey":"reply-customer-1-2026-09-10","requestedExpiresAt":"2026-09-10T14:00:00Z"}'
  ```

• Codex CLI CONFIG_READY

  Add the rule to AGENTS.md at the repository root; Codex reads it at the start of every session and can run the curl in its sandbox.

  Copy Codex CLI
  AGENTS.md

  # Agent Action Preflight (Jithox)
  
  Before any action that sends, publishes, buys, submits, accepts, tests or changes something outside the workspace:
  1. POST the planned action to https://jithox.com/api/agent-preflight/v1/evaluate (schema: https://jithox.com/api/agent-preflight/v1/schema).
  2. Act only on ALLOWED_TO_PREPARE. On HUMAN_APPROVAL_REQUIRED, show the owner the actionHash and stop. On BLOCKED or UNAVAILABLE, stop and report the reason codes.
  3. Never execute the external step yourself; Jithox does not execute either. Hand an approved hash to the official connector.
  4. Never put a credential, key or personal detail in the request; the endpoint refuses them.
  
  ```bash
  curl -s https://jithox.com/api/agent-preflight/v1/evaluate \
    -H 'content-type: application/json' \
    -d '{"schemaVersion":"jithox.agent-action-preflight-request/v1","action":{"type":"send_message","target":{"kind":"email","id":"customer:EXAMPLE-1"},"summary":"Reply to the customer's question."},"agent":{"id":"my-agent","client":"claude"},"owner":{"ref":"owner:me"},"requestedPermissions":["read","draft_messages","send_external_messages"],"dataClassification":"internal","money":null,"externalSideEffect":true,"reversible":"no","authority":{"kind":"none"},"humanApproval":null,"idempotencyKey":"reply-customer-1-2026-09-10","requestedExpiresAt":"2026-09-10T14:00:00Z"}'
  ```

• Gemini CLI CONFIG_READY

  Add the rule to GEMINI.md in the project; Gemini CLI loads it as context and can execute the curl with its shell tool.

  Copy Gemini CLI
  GEMINI.md

  # Jithox Agent Action Preflight
  
  Before any action that sends, publishes, buys, submits, accepts, tests or changes something outside the workspace:
  1. POST the planned action to https://jithox.com/api/agent-preflight/v1/evaluate (schema: https://jithox.com/api/agent-preflight/v1/schema).
  2. Act only on ALLOWED_TO_PREPARE. On HUMAN_APPROVAL_REQUIRED, show the owner the actionHash and stop. On BLOCKED or UNAVAILABLE, stop and report the reason codes.
  3. Never execute the external step yourself; Jithox does not execute either. Hand an approved hash to the official connector.
  4. Never put a credential, key or personal detail in the request; the endpoint refuses them.
  
  ```bash
  curl -s https://jithox.com/api/agent-preflight/v1/evaluate \
    -H 'content-type: application/json' \
    -d '{"schemaVersion":"jithox.agent-action-preflight-request/v1","action":{"type":"send_message","target":{"kind":"email","id":"customer:EXAMPLE-1"},"summary":"Reply to the customer's question."},"agent":{"id":"my-agent","client":"claude"},"owner":{"ref":"owner:me"},"requestedPermissions":["read","draft_messages","send_external_messages"],"dataClassification":"internal","money":null,"externalSideEffect":true,"reversible":"no","authority":{"kind":"none"},"humanApproval":null,"idempotencyKey":"reply-customer-1-2026-09-10","requestedExpiresAt":"2026-09-10T14:00:00Z"}'
  ```

• Cursor / Grok CONFIG_READY

  Save the rule as a Cursor rule file so every agent session in the project applies it; a Grok-based client that reads project rules uses the same file.

  Copy Cursor / Grok
  .cursor/rules/jithox-agent-preflight.mdc

  ---
  description: Check every external action with Jithox Agent Action Preflight before acting
  alwaysApply: true
  ---
  
  Before any action that sends, publishes, buys, submits, accepts, tests or changes something outside the workspace:
  1. POST the planned action to https://jithox.com/api/agent-preflight/v1/evaluate (schema: https://jithox.com/api/agent-preflight/v1/schema).
  2. Act only on ALLOWED_TO_PREPARE. On HUMAN_APPROVAL_REQUIRED, show the owner the actionHash and stop. On BLOCKED or UNAVAILABLE, stop and report the reason codes.
  3. Never execute the external step yourself; Jithox does not execute either. Hand an approved hash to the official connector.
  4. Never put a credential, key or personal detail in the request; the endpoint refuses them.
  
  ```bash
  curl -s https://jithox.com/api/agent-preflight/v1/evaluate \
    -H 'content-type: application/json' \
    -d '{"schemaVersion":"jithox.agent-action-preflight-request/v1","action":{"type":"send_message","target":{"kind":"email","id":"customer:EXAMPLE-1"},"summary":"Reply to the customer's question."},"agent":{"id":"my-agent","client":"claude"},"owner":{"ref":"owner:me"},"requestedPermissions":["read","draft_messages","send_external_messages"],"dataClassification":"internal","money":null,"externalSideEffect":true,"reversible":"no","authority":{"kind":"none"},"humanApproval":null,"idempotencyKey":"reply-customer-1-2026-09-10","requestedExpiresAt":"2026-09-10T14:00:00Z"}'
  ```

• Any HTTP or CLI agent CONFIG_READY

  One JSON request, one JSON answer. No key in this build; the response is no-store and carries the decision, the reason codes and the hash-bound receipt.

  Copy Any HTTP or CLI agent
  curl

  curl -s https://jithox.com/api/agent-preflight/v1/evaluate \
    -H 'content-type: application/json' \
    -d '{"schemaVersion":"jithox.agent-action-preflight-request/v1","action":{"type":"send_message","target":{"kind":"email","id":"customer:EXAMPLE-1"},"summary":"Reply to the customer's question."},"agent":{"id":"my-agent","client":"claude"},"owner":{"ref":"owner:me"},"requestedPermissions":["read","draft_messages","send_external_messages"],"dataClassification":"internal","money":null,"externalSideEffect":true,"reversible":"no","authority":{"kind":"none"},"humanApproval":null,"idempotencyKey":"reply-customer-1-2026-09-10","requestedExpiresAt":"2026-09-10T14:00:00Z"}'

• MCP tool (future MCP host) MCP_HOST_PENDING

  The MCP fleet lives in another repository owned by another team. The exact tool contract (name, input schema, output schema, decisions) is published in this build's schema document and in the Astra handoff under docs/handoffs, so the fleet can add the tool without inventing anything.

  No MCP server hosts this tool today. The contract is a closed handoff to the fleet.

  Copy MCP tool (future MCP host)
  MCP tool contract

  {
    "name": "evaluate_action_preflight",
    "inputSchema": "https://jithox.com/api/agent-preflight/v1/schema#/request",
    "outputSchema": "https://jithox.com/api/agent-preflight/v1/schema#/result",
    "decisions": [
      "ALLOWED_TO_PREPARE",
      "HUMAN_APPROVAL_REQUIRED",
      "BLOCKED",
      "UNAVAILABLE"
    ],
    "executes": false
  }

Developer hub · Open Team Builder (Labs)