Full control over what AI can do
Stop worrying about AI tools going rogue. Define exactly which tools are available, with what permissions, and for whom.
Least privilege by default
Tools are disabled until you explicitly enable them. No surprise capabilities.
Complete visibility
See exactly which tools are active, who enabled them, and when.
Usage guardrails
Set rate limits, spending caps, and automatic alerts before things go wrong.
The difference is control
- All tools available by default
- No visibility into tool usage
- Unlimited API calls possible
- No audit trail for compliance
- Same permissions for everyone
- Explicit opt-in for each tool
- Real-time usage dashboard
- Configurable rate limits & caps
- Complete audit log with context
- Role-based permission sets
Configure programmatically or via dashboard
Set up tool permissions in code or use our visual editor. Your choice.
export default {
project: 'customer-support-bot',
tools: {
// Enable specific tools from each server
'zendesk': {
enabled: ['get_ticket', 'add_comment'],
disabled: ['delete_ticket', 'close_account'],
},
'slack': {
enabled: ['send_message', 'get_channel'],
rateLimit: { calls: 100, period: '1h' },
},
'stripe': {
enabled: ['get_customer', 'list_invoices'],
// Block any write operations
disabled: ['*_create', '*_update', '*_delete'],
},
},
limits: {
maxCostPerDay: 50, // USD
alertAt: 40, // Alert at 80%
},
}Define your tool permissions as code. Version control your AI capabilities.
Enterprise-grade controls
Per-tool permissions
Enable read_user but not delete_user. Granular control at the tool level.
Rate limiting
Set calls per minute, hour, or day. Prevent runaway usage.
Spending caps
Set daily or monthly spending limits. Get alerts before hitting caps.
Audit logging
Every tool call logged with timestamp, input, output, and user context.
Permission sets
Create reusable permission templates for different environments or teams.
Version rollback
Instantly revert to previous configurations if something goes wrong.
We needed to give our AI access to customer data without risking destructive operations. Primrose's tool configuration let us enable exactly what we needed—nothing more.
Sarah Chen
Head of Engineering, Acme Support
Ship AI with confidence
Know exactly what your AI can and cannot do. Start configuring in minutes.