Now in beta on iPhone and Android

Your AIs ask.
You decide.

Reins puts your phone between AI agents and your accounts. Agents get the work done, the keys stay with you, and nothing important happens without your tap.

Get Reins Watch it work · 30 s

For iPhone, Android, Mac, Windows and Linux. Free and open source. All downloads

Works with Claude Code Codex Cursor Gemini CLI Claude.ai ChatGPT and any MCP client
How it works

One question, on
the right screen.

You connect your accounts to Reins once. From then on an agent never holds a key: it asks, and your phone answers.

$ git push origin main
↳ waiting for your phone
1

Your agent asks

Claude Code, Cursor or ChatGPT reaches for git, Gmail or a password. Reins catches it and the agent waits.

GitHub · Push
Push 8 commits to octo/app
2

Your phone shows exactly what

The branch, the commits, the email and its recipients. The colour tells you the kind of ask before you read a word.

DenyApprove
Or let Autopilot take the routine ones
3

You decide

Approve with Face ID or your fingerprint, for once or for a while. The agent gets the result, never the key.

Read it at a glance

Colour means it needs you.

Reins stays quiet paper until an agent asks. Then the screen fills with one colour, and the colour says what kind of thing is about to happen.

Push
Sends or writes
Send an email to Anna
Read
Reads or searches
Read 2 emails from Stripe
Delete
Can't be undone. You hold to confirm.
Delete the repo octo/old-api
Grant
Power you handed over
Read mail for 1 hour
Pair
Connects something new
Connect MacBook Pro
Accounts
Changes an account
Use the staging-db password
Autopilot

It learns the
routine. Risky
things always ask.

A small model on your phone learns what you approve. It answers the easy ones, shows how sure it is, and steps aside when it isn't.

Runs on your phone
What you approve never leaves it to train anything.
Shows its confidence
“Allow · 97%” when it's sure, “Unsure” when it isn't. One swipe corrects it.
Some things always wait for you
Deletions, payments, passwords, force pushes and SSH signatures.
How Autopilot decides
Gmail · Send1:12

Send an email to Anna Petrova

Allow · 97%Review
Gmail · Search0:48

Search mail for “invoice”

UnsureReview
GitHub · Delete4:51

Delete the repo octo/old-api

Always asksReview
Security

The agent never sees your token.

Your accounts are connected to Reins, not to the agent. The server only relays. Your phone holds the keys and makes the call.

Your AI agent
Asks to act. Holds no keys.
asks
Reins server
Only relays. Never writes a request to disk.
shows you
Your phone
Holds the keys. Decides.
acts
Your accounts
Gmail, GitHub, Calendar, git, SSH, passwords.

Open source

The phone app, desktop app, protocol and Autopilot are Apache-2.0. The server, a Vaultwarden fork, is AGPL-3.0.

katulevskiy/reins

Run your own server

One binary or a Docker image. Point the apps at it and nothing passes through ours.

Self-hosting guide

Read the threat model

What Reins protects against, what it stores, and what it can't do for you.

Security model
Get Reins

Two apps. Five minutes.

One on your phone that decides, one on your computer that asks it. Install both, then scan once to pair them.

iPhone

Beta · TestFlight

Join the public beta through Apple's TestFlight. Needs iOS 26.

Join on TestFlight

Android

Beta · Download

Download the beta straight to your phone. Needs Android 12 or later.

Download for Android

Your computer

Mac · Windows · Linux

Pairs with your phone and connects Claude Code, Codex, Cursor and the rest in one step.

Get the computer app
1Install on your computer 2Get the phone app 3Scan the code to pair Every platform and the command line

Keep the
final say.

Your agents work. You keep the keys.

Get Reins View the source

Reins in 30 seconds

An agent goes to force-push and email everyone. Your phone shows exactly what would happen, and one tap stops it.