Access Center

See who can use the vault, for how long, and revoke without editing project files.

Agent grants folder · items · TTL · revoke Mac or iPhone approve Human sessions TTY + token for IDE revoke ends access Insights / flags display-only signals no silent AI calls

Remote JIT

Approve or deny from a paired iPhone when you are away from the Mac.

Investigation flags

Info / Review / Warning are local display cues. They do not revoke or authorize.

Click to focus

Insights summarize recent access by item and folder so you can drill in quickly.

MCP proxy decisions

On the MCP proxy tab, Access Center also lists recent proxy decisions that never created a grant — for example a denied or unavailable upstream. Those rows use the declared upstream name, honor the workspace filter, and sit in the same glass card treatment as grant rows. They are rejected before Authsia creates a grant.