Tasks
Step-by-step instructions for common jobs. For background on how a feature works before you configure it, see Concepts.
Connecting AI Tools
Connect Claude Code, Cursor, OpenAI Codex, or GitHub Copilot through AIControls.
Read more →
Configure an Upstream
Add and route to an LLM provider.
Read more →
Write a Policy
Author a CEL policy that matches tool calls or LLM requests.
Read more →
Assign Autonomy Tiers
Set an agent's T1–T4 autonomy tier from the UI or the API.
Read more →
Cost Governance
Set a budget and reduce spend with context optimization.
Read more →
Security & Compliance
Tune detection thresholds, set up the Shadow AI browser extension, and generate a compliance report.
Read more →
Restrict Network Egress
Limit which domains MCP tool traffic may reach, with scoped rules and exceptions.
Read more →
Approve or Deny a Request
Decide on exception, model-access, and budget top-up requests, including multi-approver co-sign, and revoke a grant.
Read more →
Request a Config-Target Exception
Request and approve a time-bounded exception against a budget cap or an egress allowlist.
Read more →
Connect an MCP Server
Register and authenticate an MCP server with AIControls.
Read more →
Enable Network Egress Filtering
Generate a CA, configure the egress proxy, and write your first egress policy.
Read more →
Admin Console SSO
Sign in to the admin console with Google, Azure AD / Entra ID, Okta, or any OIDC provider.
Read more →
Link Your Enterprise Identity
Enable Cross-App Access for PAT-authenticated tools like Claude Code.
Read more →
Create a Team Access Binding
Map an IdP team to one or more MCP servers.
Read more →
Integrations
Configure webhook, Slack, Teams, or S3 export.
Read more →
Export Traces
Push LLM and tool-call traces to Langfuse, Jaeger, or Tempo.
Read more →
Manage Builder Portal Access
Control what developers can see and do in their own portal.
Read more →
Configure GitHub Delivery Attribution
Connect GitHub so AIControls can ingest pull requests for the Productivity dashboard.
Read more →