CAPABILLY is a runtime policy enforcement layer for your AI agents. Check every action before it runs: , , .
See a Live Demo: a guided walkthrough with our team.
Design partners get one custom Protobot, designed, deployed and governed by CAPABILLY at no cost for the pilot period.
Packs for HIPAA, FERPA, the NIST AI RMF and state AI rules, plus CIPA and COPPA for schools.
Adopt a pack as it is, or adapt it.
Write your own rules, or upload your policy documents and CAPABILLY drafts the rules.
A person approves every draft before it is enforced.
Every agent action is checked against your rules before it reaches a system.
Each one is , or , with the rule and the reason attached.
Escalated actions go to a named approver with the full request in view.
The action waits until they decide.
Every decision goes into a tamper-evident, hash-chained log with its rule version.
Each rule maps to framework controls.
Route agents through the CAPABILLY gateway by MCP proxy or API, whatever they were built with.
Unregistered agents are discovered and held to a default rule.
Adopt a pack, adapt it or write your own. Or upload your written policies and CAPABILLY drafts the rules, with a person approving every draft.
Aligned to the NIST AI RMF
Rules for schools
Packs are designed to support HIPAA and FERPA programs.

Regulated teams, IT and security leaders, and the service providers who deploy agents for clients. CAPABILLY starts with Policy Library packs for healthcare, schools and MSPs.
CAPABILLY inventories agents that aren't registered and runs them in monitor-only mode.
See what a pack would decide on real traffic, with nothing blocked.
Replay recent calls against a change. A second author approves every rule before it is enforced.
Set each policy to fail closed or fail open if CAPABILLY can't be reached. Every decision is logged.
Apply for one custom Protobot, designed, deployed and governed by CAPABILLY at no cost for the pilot period.
Or See a Live Demo, a guided walkthrough with our team · support@capabilly.com