Agents within bounds · Planned
Your agents do the work. You decide what they may touch.
More and more of a company of one will be run by AI agents. Today each agent holds its own keys to its own platforms, and nothing says “this one may only touch company A” or “ask me before posting”. Selfirm is designed to be that place. The features on this page are planned; the rules are settled, and the record agents will rely on is what works today.
What agents are missing
A state they can trust
Each agent pulls data from each platform and stitches it together. The numbers disagree and cannot be checked.
The right attribution
Without knowing which account belongs to which company, an agent’s analysis and actions land in the wrong place.
One boundary
No single place says what each agent may see and do, and no single record shows what they did.
Who may do what
The same table applies to an agent you build yourself and to the ones Selfirm provides.
| Action | You | An AI agent |
|---|---|---|
| See holdings and balances | Yes | Only within its grant |
| Draft an analysis or a task | Yes | Yes |
| Change the record | Yes, with a trace | Only as a draft for you to approve |
| Draft a reply, a post, an email | Yes | Only within its grant |
| Send it | Yes | Later, and only after you approve |
| Transfer money, trade, sign | Outside Selfirm, in your own accounts | Never: not a capability in the system |
| Change permissions | Yes, after strong sign-in | Never |
How a request from an agent is handled
- 01
It proposes
An agent asks to read something or to do something. Its own reasoning is never treated as permission.
- 02
A separate check
A deterministic permission service compares the request with the agent’s grant: scope, action, party, budget, period.
- 03
Three outcomes
Low-risk internal work goes ahead. Anything that needs you becomes a matter on your desk. Financial operations are refused.
- 04
A record
What was asked, what was allowed, who approved it and when: all of it is kept and can be reviewed.
What already holds today
AI cannot write your record
Works todayAI reads files and proposes. Only a decision you confirm becomes a fact.
Selfirm cannot move money
Works todayIt reads files you hand in and holds no bank credentials. There is nothing in it that could make a transfer.
Grants per task
PlannedEach agent starts from zero and receives a scope, a set of actions, a budget and an end date.
Read access through MCP
PlannedYour own agents read the checked record instead of raw platform data. See developers.
Common questions
Will agents ever be able to pay or trade for me?
Not in anything we have planned. Moving assets changes what a product is, legally and in the damage a mistake can do. If it is ever offered, it will need a one-off, fully specified intent, independent simulation, and your signature outside Selfirm.
Can a document I import change what an agent may do?
No. Text inside imported files is treated as data, never as instructions, and permissions cannot be changed through it.
When will this be available?
It follows the finance work. Read-only access for outside agents comes first; see the <a href="/roadmap/">roadmap</a>.
Bring your own records along
We are onboarding a small group of founders whose companies, accounts and obligations span countries. Tell us about your setup.