Overview
What your agents did in the last 24 hours.
Free tier usage
Invite teammates
Share this tenant's policy and audit log with your team. Each member gets their own API key.
Audit log
Every decision, hash-chained and tamper-evident.
| Status | Verb | Principal | Receipt | Time |
|---|---|---|---|---|
| Loading… | ||||
Principals
The identities your API keys belong to. Create one per service or agent — e.g. one principal called billing-agent, one called fulfillment. Disable a principal to pause all of its keys at once.
Create principal
| Name | Status | Keys | Created | |
|---|---|---|---|---|
| Loading… | ||||
API keys
Keys your agents use to call Writ. Revoking a key kills it instantly. Writ stores only a hash, so a key is shown once.
| Name | Key | Principal | Created | Last used | Receipts | |
|---|---|---|---|---|---|---|
| Loading… | ||||||
Security
An authenticator app is required before any new API key can be created or the sponsor token rotated. A session alone isn't enough: anything that can read your email — including your own agents — could otherwise mint credentials.
Sponsor token
The human half of your credentials: it approves agent actions (grants) and operates the kill switch. Shown once when issued — Writ stores only a hash. Lost it? Rotate it here.
Team
Invite teammates into this tenant: they sign up with your invite code and share this tenant’s policy and audit log. Each member gets their own API key; the sponsor token is never shared.
Policy
Which verbs require a grant before the write. Changes apply immediately — the next /v1/check call sees the updated policy.
Verb policies
Loading…
Default mode
What happens when a verb has no explicit policy.
require_grant Require grant (fail closed) — needs a live grant, else DENY. This default is fixed and not configurable.Per-principal overrides
The top policy layer: a principal's override beats the environment override, which beats the tenant default. Verbs the principal doesn't set inherit downward — the badge shows where each verb's effective mode comes from. Overrides on disabled or deleted principals are inert.
Revoked principals
A revoked sponsor + agent is DENIED on every check, even under an allow policy.
| Principal | Reason | Revoked | |
|---|---|---|---|
| Loading… | |||
Revoke or reinstate
Read-only when you’re signed in by email. Revoking and reinstating is a sponsor action: it needs your tenant’s sponsor token (writ_sp_…, shown once at signup), so a stolen browser session can’t flip the kill switch. Use writ revoke / POST /v1/revoke, or paste the token below (kept in this tab’s memory only).
Grants
Mint a one-time approval for a STEP_UP. The next writ check for this exact verb/target/purpose consumes the grant and returns ALLOW.
Granting is a sponsor action: it needs your tenant’s sponsor token (writ_sp_…, shown once at signup). Paste it below (kept in this tab’s memory only).
Enforcement
Vaulted credentials, gated execution, and CI attestation.
Credential vault
Enroll one credential per system. It is envelope-encrypted and never shown again. Revoking burns outstanding leases.
| System | Version | Status | Created |
|---|---|---|---|
| No enrolled credentials. | |||
GitHub App
Installations, the optional PR-comment bot, and the per-installation fail threshold for the check run. Leave the threshold blank for neutral-only verdicts; PR comments post a per-site fix table with a paste-ready policy.
| Installation | Status | PR comments | Fail threshold | |
|---|---|---|---|---|
| No GitHub App installations. | ||||
CI attestation manifests
Latest signed manifest and last drift per repo. Use writ scan --manifest-out path.json --key <apiKey> to submit from CI.
| Repo | Commit | Scanner | Score | Risk profile | Submitted |
|---|---|---|---|---|---|
| No manifests yet. | |||||
Billing
The audit log is the meter. Every receipt counts.
Current plan
Metered billing is $1 per 1,000 receipts over the 10,000/month free allowance, via Stripe. Card details go to Stripe’s hosted checkout and never touch Writ.
How billing works
| Free | 10,000 receipts/month, no card required |
| Metered | $1 per 1,000 receipts over the free allowance, billed monthly |
| Enterprise | Production verbs on customer systems, custom policy. Talk to us |
Your scan report
Every write-site the scanner found in your public repos, with the gate pattern for each. Re-scan after gating a verb and this report updates.
Scan report
| File | Verb | Risk | Snippet |
|---|