Guide
Approve Claude Code prompts from your phone
A notification tells you that Claude Code is waiting; it does not answer the request. You can reach the terminal over SSH, or use remote session features supported by your installed version.
Options available today
A notification tells you that Claude Code is waiting; it does not answer the request. You can reach the terminal over SSH, or use remote session features supported by your installed version. A blocking approval hook can route a decision elsewhere. Keep permission checks enabled and verify that the integration actually holds the action until you answer.
Where Saeta fits
Coming soon. Saeta is in development. The phone app launches on Android first, with iOS soon after. Join the waitlist and we'll email you when early access opens.
- Known-safe actions pass instantly against your trust list. Anything else pauses and lands in one inbox, on your desktop or on your phone if you've stepped away.
- Approve, deny, or reply with a correction such as "use pnpm instead", and the agent picks up exactly where it left off.
Your code, file paths and commands never reach our servers in readable form. The cloud only relays encrypted data.
Saeta watches the agent configurations it installs and warns you if they change unexpectedly. It keeps its local connection and token readable only by your user account. If nobody answers a request in time, it is denied by default, not approved. That makes accidents much less likely to slip through. It does not make a determined attack impossible.
A guardrail, not a sandbox
Claude Code uses hooks. Cursor uses its own hooks, with different coverage; Saeta’s planned integration does not pause file edits. Codex, Gemini CLI, Windsurf and OpenCode connect through MCP: asking Saeta depends on the agent, so this connection is not mandatory interception.
Security tools that overclaim put people at risk. If you need to contain an agent you don't trust, run it in a container or a virtual machine that can't reach anything you can't afford to lose.