mild.run — Human Approval Gate for AI Agents

Before your AI agent does anything irreversible — your tap required.

mild.run is an MCP server that intercepts sensitive AI agent actions (Stripe refunds, email sends, data deletes) and sends you a notification (Telegram or email) to approve or block before anything happens. Your agent has no credentials — the gate is enforced at the infrastructure level.

---

The Problem

You're running AI agents that touch real money, real emails, and real data. When the agent misunderstands your intent or hallucinates a parameter, the damage is immediate and irreversible.

"My agent issued a $1,500 refund. I said $150."
"My agent emailed my entire CRM with a test message."
"My agent cancelled a subscription I didn't mean to cancel."

Telling the agent to "ask before acting" doesn't work — you're asking a non-deterministic system to police itself. mild.run enforces the gate at the infrastructure level. No approval → no action. The agent cannot bypass it.

---

How It Works

1. Sign up at mild.run — free
2. Connect Stripe (paste your restricted API key — charges:Read + refunds:Write only)
3. Connect Telegram (click a bot link → send one message → verified) or use email approval
4. Paste your MCP URL into your agent platform:

https://mcp.mild.run/mcp?mcp_token=YOUR_TOKEN

That's it. Every sensitive action now requires your tap before it fires.

---

What It Gates

Action	Stakes	Status
Stripe refund	Money	✅ Live
Stripe subscription cancel	Revenue	✅ Live
Stripe customer delete	Data	✅ Live
Stripe payout	Cash	✅ Live
Gmail send email	Reputation	✅ Live
Slack message	Communication	✅ Live

---

Compatible Platforms

Works with any MCP-compatible agent platform:

• base44 — paste the URL in one chat message
• Claude Desktop — add to claude_desktop_config.json
• ChatGPT — requires Developer Mode (Settings → Connectors), then add as a connector with no auth
• n8n — add as an MCP node
• Cursor / Windsurf — add to MCP settings
• Any MCP client — Streamable HTTP transport (/mcp)

A legacy SSE endpoint (/sse) is still available for any client that hasn't moved to Streamable HTTP yet, but it's deprecated — new integrations should use the /mcp URL above.

---

The Approval Flow

When your agent tries a gated action:

1. Agent calls the tool (e.g. stripe_refund)
2. mild.run logs the request and immediately returns a confirmation to the agent
3. You receive a notification (Telegram tap or email link) to approve or block:

🌊 mild.run — Approval Required

Action: Stripe Refund
Charge: ch_3abc...
Amount: $150.00
Reason: Customer request

[✅ Approve]  [🚫 Block]

4. Tap Approve → refund fires. Tap Block → nothing happens.
5. No decision within 24 hours → auto-blocked.
6. Every decision is logged in your dashboard at mild.run.

---

Why Not Just Prompt the Agent to Ask?

Prompts are advisory — the agent can ignore them, especially under prompt injection. mild.run holds your Stripe restricted key. The agent has no credentials. There is no path from agent to Stripe except through mild.run.

	Prompt-based	mild.run
Enforced by	The agent itself	Infrastructure
Bypassable?	Yes	No
Credential bypass path?	Yes	No
Audit trail?	No	Yes

---

Pricing

Plan	Price	Included
Free	$0/month	30 approvals/month, Stripe + Gmail, Telegram
Solo	$12/month	Unlimited approvals, all integrations, 90-day audit log

Sign up free at mild.run.

---

MCP Tools

mild.run exposes the following MCP tools. All require mcp_token as a parameter (your personal token from mild.run/dashboard).

Tool	Description
stripe_refund	Issue a Stripe refund after human approval
stripe_subscription_cancel	Cancel a Stripe subscription after human approval
stripe_customer_delete	Delete a Stripe customer after human approval
stripe_payout	Create a Stripe payout after human approval
gmail_send_email	Send a Gmail message after human approval
slack_post_message	Post a Slack message after human approval
get_approval_status	Check the status of a pending approval request

---

Security

• Stripe restricted keys are stored encrypted — never in plaintext
• Your mcp_token is a UUID — no email or personal data in the URL
• Telegram webhook validated with secret token
• Every approval decision is logged with timestamp and stored server-side
• mild.run never stores your email content beyond the approval request

---

Links

• Website & signup: mild.run
• Dashboard: mild.run/dashboard