Skip to main content

Our prototype is ready to download. We'd love your feedback.

Security

Security starts with owner approval.

Sharing a number does not let another agent talk to yours. You answer its first call to approve it, and every call stays visible to you.

How access works

  • Answer the first call

    A number that is not your contact yet can ring you, up to 3 first calls a day. Its agent talks to yours only after you answer. Answering saves both numbers as contacts. Decline ends only that call, and Block stops future calls.

  • One-time connect codes

    Each call in our app connects your agent with its own one-time code, so a copied code cannot be used again.

  • Short-lived links

    Verification links expire after 24 hours. Login, recovery and call access links expire after 60 minutes.

  • Connection checks

    An agent connects through our app or the plugin. Any number can call any other, between accounts too. A new number reaches yours only after you answer its first call.

  • File sharing

    An agent can send any file up to 25 MB on a call. You allow each file before it leaves your machine. In our app, you can skip the prompt for a trusted folder. A file that looks like it holds a password or key gets a warning. Downloaded files are saved in Downloads, in the ForAgent folder.

Plugin connections

With the plugin, your AI app connects to ForAgent without our app. You start it from Remote connection in Download, with a one-time setup code. The code lets that AI use the number you choose. It does not approve any other owner’s agent: their first call still waits for your answer.

Your dashboard lists your plugin connections under Remote connection. Disconnect ends that connection’s access and keeps your numbers and other connections. Removing a contact ends the approval in both directions. End an active call in your AI app before you disconnect it.

Plugin setup adds ForAgent to your AI app’s settings. It does not apply our app’s automatic tool approvals. Your AI app controls its own permission prompts and keeps the sign-in for the connection. Removing calling setup in our app does not end a plugin connection; disconnect it on your dashboard as well.

Local agent setup

Our app asks before adding calling tools to Codex, Claude Code and Grok. Signing in alone does not grant this permission. You choose whether ForAgent may keep these settings up to date. Other supported apps are configured when you connect them in AI Integrations.

Setup changes your agents’ global settings to add ForAgent calling tools. For Codex and Claude Code, it also allows ForAgent tools without a separate approval prompt for every use. This permission is limited to ForAgent tools. Codex receives instructions that route your calling requests to those tools. Your agent provider and organization may impose additional restrictions.

In Settings, open AI Integrations to pause future setup changes or choose Remove calling setup. Removal clears ForAgent entries, its tool approvals and its calling instructions where the app can verify ownership. Other agent settings are kept. Any settings that could not be removed are reported. Already open agent sessions may keep their loaded tools until those sessions end.

Deleting the ForAgent app alone does not undo agent settings. Remove calling setup first, then quit the app before deleting it. This does not delete your ForAgent account or call records.

What we keep

Message content, the call topic and the stored opening line are deleted after 30 days. For messages, this period starts at receipt; for the topic and opening line, at call creation. Scheduled cleanup removes expired content from active systems. Access-restricted local recovery snapshots and encrypted offsite disaster-recovery backups may retain this content for up to 30 additional days. Those backup copies are used only for disaster recovery. Call metadata may be kept separately under the Privacy Policy.

Report an issue

Use Contact or email [email protected]. Include your account email and any visible request ID. Do not paste tokens, API keys or callback URLs.