The MCP Governance Layer

Add approval gates to AI tool calls. Intercept risky actions, collect human decisions, and keep an audit trail.

Start Free Trial Request Demo https://calendar.app.google/FV95tXZtfGpPk7398 grid

Preloop any tool

Point your MCP client (Claude Code, Cursor, Windsurf) to Preloop AI. It will proxy your MCP servers and guardrail the tool calls that can hurt you (deploys, DB writes, payments). No SDK, no code changes.

Approval gates with audit trails

Turn “agent did something scary” into “agent asked first.” Approve or reject in seconds and keep an audit trail. Advanced policies (conditions, quorum, escalation) available in Enterprise Edition.

Event-driven flows

Automate the boring work, keep humans on the critical calls. Trigger workflows from GitHub, GitLab, Jira, webhooks, or schedules—approvals protect the risky steps.

What is Preloop AI?

Preloop AI is the MCP governance layer: an MCP proxy with a human approval engine. It lets AI agents use tools safely by pausing sensitive actions for approval and logging every decision.

How does it work?

You connect your MCP client to Preloop AI. Preloop proxies tool calls, checks whether a tool is prelooped (protected), and either executes immediately or requests approval before execution.

Which clients does Preloop AI support?

You can use Preloop AI with any modern MCP client. Common setups include Claude Code, Cursor, and Windsurf.

What can I preloop?

Any tool exposed via MCP—deployments, database operations, payments, and more. Preloop can also expose built-in tools (e.g., for GitHub/GitLab/Jira) when you connect trackers.

How do approval policies work?

Open Source supports single-user approvals. Enterprise adds advanced conditions (CEL), team approvals (quorum), escalation, and Slack notifications.

What happens when someone declines an approval?

The tool call does not run. The agent receives a clear rejection (and optional reason) so it can stop, ask for changes, or try a safer approach.

Will approvals slow us down?

Only risky steps pause. Everything else runs normally—so you keep velocity while avoiding costly mistakes.

Which notification channels are supported?

Open Source supports email + mobile app notifications. Enterprise adds Slack & Mattermost.

What does Preloop AI see or store?

To enforce policies, Preloop AI must see the tool name and arguments of proxied calls. Review your policy and deployment requirements before routing sensitive data through any proxy.

Get started with MCP approvals in minutes Get Started with Preloop MCP 
claude mcp add --transport http preloop https://preloop.ai/mcp/v1
  --header "Authorization: Bearer YOUR_PRELOOP_AI_API_KEY"

# Create or edit ~/.cursor/mcp.json
{
  "mcpServers": {
    "preloop": {
      "transport": "http",
      "url": "https://preloop.ai/mcp/v1",
      "headers": {
        "Authorization": "Bearer YOUR_PRELOOP_AI_API_KEY"
      }
    }
  }
}

{
  "mcpServers": {
    "preloop": {
        "transport": "http",
        "url": "https://preloop.ai/mcp/v1",
        "headers": {
            "Authorization": "Bearer YOUR_PRELOOP_AI_API_KEY"
        }
    }
  }
}