corsair

Why we included this project

Teams building agents that touch real SaaS accounts often find themselves choosing between handing over full credentials and locking the agent down so tightly it cannot do anything useful. Corsair takes a middle route. You connect it to your agent through MCP, and it sits in front of every integration call to Gmail, Slack, Drive, Stripe and other apps. Each integration gets its own permission mode, open, cautious, strict or readonly, and you can pin individual endpoints so a sensitive action always waits for human approval. The agent never sees the raw credentials, and destructive actions surface as an approval link you can review or deny before anything executes.