Rules you control
Ask Nemotron to draft exact file permissions from automatically collected project paths and task intent. Review and explicitly apply them; suggestions never activate themselves.
YOUR WORKSPACE. YOUR RULES.
Let agents work.
Keep the decision.
A review layer for Cursor that checks supported tool calls against your rules—and pauses sensitive actions for your approval.
Open source · macOS & Linux · Bundled workspace setup
PROPOSED ACTION chat / workspace
Write → src/settings.json
Proposals are untrusted. Policy belongs to the developer.
WAITING FOR YOU
The requested change is within scope. Review its evidence before allowing this write.
PolicyExact write grant
DecisionApprove once or reject
ExecutionHeld until your decision
Illustration only. This page does not execute commands or inspect files.
BUILT WITHNVIDIA Nemotron+Nebius Token Factory+Model Context Protocol
01 / BUILT AROUND YOUR WORK
Clear rules.
Visible decisions.
Native approval checkpoints
Hold supported sensitive file operations while you inspect the proposal, evidence and findings. Approve once or reject.
Structured shell inspection
Inspect supported read-only commands, pipelines and conditional lists. Check every stage and file; deny unresolved behavior.
Sensitive-data checks
Check supported reads and outbound review payloads for known credential patterns and your repository’s blocked terms.
A second opinion, when needed
Connect hosted Nemotron review for eligible actions. Policy remains authoritative; model findings help you make the decision.
Activity organized by chat
See which conversation requested an action and whether it was allowed, blocked, waiting or completed.
02 / FROM INSTALL TO CONTROL
One extension.
An explicit setup.
The companion is included. No separate service to install or terminal process to keep running.
Set up your workspace →- 1
Enable your workspace
Install the extension and confirm project setup. ApprovalLens adds its hooks, MCP entry and editable rules.
- 2
Apply a narrow policy
Write rules yourself or connect hosted review for a Nemotron draft. Review the exact grants before applying. Shell inspection remains an explicit opt-in.
- 3
Inspect, then decide
Review supported sensitive calls in Cursor. Connect a pilot credential separately for hosted AI findings.
03 / DESIGNED TO SHOW ITS LIMITS
Know what’s checked.
Know what isn’t.
- Supported tools, explicit coverage. Native file operations and selected read-only shell commands. Search and other host paths may bypass hooks.
- Unresolved means blocked. Arbitrary scripts, package managers and shell network transfers need dedicated adapters or isolation.
- Detection has limits. Sensitive-data checks can miss encoded or unfamiliar secrets. This is not a network sandbox.
- AI is a bounded pilot. Local rules work without a credential. Hosted review requires a private pilot token and provider availability.
LESS GUESSWORK AT THE APPROVAL STEP
Make the next action
an informed decision.
MIT licensed · Development beta · Single local workspace