New tools let companies set limits on what AI agents can do

A company called AEREDIUM has launched two tools that let businesses set rules for what AI agents can do with their software and their money. Every action an agent proposes is approved, denied or held for a person to review. The tools are called The Chair and MCP Connector. The company says both launched on October 13, 2026.

What changed

AI agents are programs that take actions on their own, such as writing software, processing payments and executing trades. AEREDIUM places a control layer between the agent and the systems it touches. The owner sets the rules, and each proposed action is checked against them before it happens.

Each decision is signed and recorded. That creates a history of what the agent did, which can be checked later. For a business that plans to let AI write code or handle payments, rules and a paper trail can limit costly mistakes.

The Chair, for coding agents

The Chair is built for software teams that use AI coding agents. It checks actions such as running commands, changing files, merging code or pushing changes. Actions covered by existing rules are approved or denied automatically. Anything else is held in a control panel, where authorized people can approve or reject it.

Each decision produces a signed receipt showing what the agent tried, which policy applied and who authorized it. The Chair works with Claude Code through a plugin. It also offers a governed shell for other coding agents, including those from OpenAI. Teams can set policies by answering a questionnaire instead of writing code. A 30-day free trial is available.

MCP Connector, for payments

MCP Connector applies the same approach to agents that handle money. Each agent gets its own wallet, its own policy and a named owner. The owner defines the agent's role and approves its mandate with a passkey, a sign-in method that uses a device instead of a password. The owner can halt or delete the agent at any time.

The wallet holds digital assets. It uses threshold signatures made inside secure enclaves, which are protected areas of a computer chip. The company says this means no complete private key is created and AEREDIUM does not hold a key to the owner's funds. It supports Ethereum, Arbitrum and Base, and keeps transaction records for seven years. It is designed for Claude and open to OpenAI and other AI frameworks.

What is not known yet

The details come from the company's own announcement. It does not give pricing beyond the free trial for The Chair, and it names no customers. It also shares no independent testing of how well the rules prevent mistakes in everyday use.