Overview

Across all your apps.

Last 7 days

View activity

Checks0

Sessions0

Sessions with an AI agent0%

Limited or stopped0

Checks per day

AI agents

Every AI agent seen in your customers' sessions, and what your rules did.

Loading…

API keys

One key per app. It is shown once, when you create it.

Key	Environment	Status	Expires	Last used	Checks	Sessions with an agent	Actions

0 keys

Activity

Per app: which AI agents came, what they reached for, and every decision.

Waiting for your app to connect

Add the key to your app. The first visit shows up here by itself.

Or test from the terminal:

Open set up

Weekly report

This week against last week, and what changed in the agents. Made to forward.

Loading…

Rules

What AI agents may see and do in your app. Saved changes reach your app within a minute.

OpenHiddenPasskeyRefused

When developers change the rulesin the app's code

Your developers, or their AI coding assistant, can change the rules in code. Their change shows up here by itself.

Ask me before their changes go live Always ask me before a risky change

Historywho changed what, and when

For developersthe rules as a file

Only for a server that cannot reach OneHuman: start it with policyFromPortal: false and this file. Every other server reads the rules from here.

Set up

Four steps, or hand it to your coding agent.

1

Install the package

npm i onehumanai
npx onehumanai init

init asks what to protect, shows every change and applies it on yes. The steps below do the same by hand. Node 22.13 or newer.

2

Add the key to your environment

The full key shows here only while this page is open. The portal never stores it.

3

Wire the middleware

4

Make one request to a protected endpoint

Waiting for the first decision from this key…

Or let your coding agent do it

paste into Claude Code, Codex or Cursor

Integration check

from what this key reported in the last 7 days

Test it yourself

Runs from your machine against your app, the way an agent would. The decision shows up above within seconds. We never send traffic to your site.

Your appA protected endpoint

npx onehumanai verify https://app.yourcompany.com /api/balance

Plan & usage

You pay only for customers who use an AI agent in your app. Your app keeps working whatever the plan.

Loading…

Settings

Your account, e-mails and management keys.

Account

E-mailMember sinceProject keys

E-mails

from arif@onehuman.ai

Reminders, the weekly summary and the 30-day reportAt most one a week, plus a note when your app connects and when the first AI agent shows up.

Password

at least 8 characters

Management keys

A management key lets a coding agent or a CI job create and revoke project keys and read usage over HTTP, without anyone opening this portal. Treat it like a password.

Endpoints Authorization: Bearer oh_admin_…

What we store

Your e-mail, and how you sign in: Google, or a password kept only as a hash. For each key: its name, prefix, environment, expiry and a SHA-256 hash. For each decision your middleware reports: a hash of the session id, resource name, decision, actor, connection state, detected tool names and reason codes. Nothing else: no payloads, no identities, no IPs.

Start your free AI agent report

Overview

Last 7 days

Checks per day

AI agents

API keys

Activity

Waiting for your app to connect

Over time

What OneHuman did

Who was acting

AI agents seen

Parts of your app

Decisions

Weekly report

Your 30-day AI agent report is ready

Rules

Waiting for your OK

New in your app

Set up

Or let your coding agent do it

Integration check

Plan & usage

Settings

Account

E-mails

Password

Management keys

What we store