Safe, but stalls.
The run blocks whenever the local agent needs a human answer and you are away from the terminal.
/* least-permission approvals */
Least-permission approvals for coding agents.
Your local agent can update you, ask a bounded question, or wait for approval — without giving your phone a shell.
Primary setup
Ask your agent to install Agent Tick with https://agenttick.sh/skill.mdAnimated illustration: a local agent interface and the Agent Tick Native App show the same request. A response from either surface resolves the request everywhere and local work continues.
// mirrored prompts
The same bounded request appears in your agent and on your phone.
Your local agent blocks on one Agent Tick Request. Answer in the local agent interface or the Native App; the same bounded response resolves the Mirrored Prompt everywhere, then local work continues.
- The agent asks once.
- The same request is visible in both places.
- The first answer resolves the request everywhere.
// bounded, not remote control
Keep the agent local. Send only the answer.
Agent Tick is not remote access and not full-auto permission skipping. Your Local Agent Interface creates a bounded request; the Native App or Personal Console returns one allowed response.
Fast, but broad.
Remote shells and permission skipping keep work moving by giving the remote surface too much authority.
Bounded, local, moving.
The local agent asks one bounded thing. The remote surface returns only the allowed response.
Local Agent Interface→ bounded request →Native App
Local Agent Interface← selected answer only ←Native App
// how it works
Agent asks. You answer. Local work continues.
Agent asks one bounded thing
A status update, a bounded question, or approval for one specific action.
You answer in the app
No terminal stream. No arbitrary prompt channel. Just the response the request allowed.
Local work continues
The agent receives the answer and continues locally, or stops safely when you say no.
Status Update: one-way progress, such as waiting, blocked, done, or failed.
Steering: choose from bounded options supplied by the agent.
Sanction: approve or deny one specific action before it happens.
// setup
Ask your agent to install Agent Tick.
The setup skill inspects your agent config, explains the changes, asks before editing, and verifies the loop when it is done.
Ask your agent to install Agent Tick with https://agenttick.sh/skill.md Open setup skill// ownership
Source-available. Self-hostable. App unlock, not app rent.
Inspect the source, run your own server, and try the app before buying. Hosted routing exists if you want convenience; it is not the point of the homepage.
// likely questions
FAQ
Why not just use remote access to the agent session?
Remote access is the right tool sometimes. Agent Tick is for one smaller job: answer a bounded request without opening a shell to the whole computer.
Why not just skip permissions?
Because removing the review point is not the same as approval. Agent Tick keeps the review point and moves the answer to a convenient surface.
Can the phone send arbitrary instructions?
No. The Native App answers the request shape created by the local agent. It cannot turn into a new prompt channel or remote shell.
What exactly gets sent through Agent Tick?
Request type, prompt/context needed to decide, allowed responses, selected response, and routing metadata.
What stays local?
The working tree, terminal, commands, agent process, and execution environment stay in the local agent environment.
Can I self-host?
Yes. Agent Tick is source-available and self-hostable. The hosted service is convenience, not a required black box.
Can I answer in the Local Agent Interface instead?
Yes. Mirrored Prompts can resolve from either surface. The first answer resolves the request everywhere.
What happens if I deny?
The local agent receives the denial and should stop or choose a safer path instead of continuing the requested action.
// try it
Try Agent Tick for free. Keep it with a one-time app unlock.
If it earns a place in your workflow, buy the app once. If it does not, you lost less time than one local-only stalled run.