How CAPABILLY works

A check on every agent action, and a record of every decision

Agents send tool calls through the CAPABILLY gateway. The gateway checks each one against your policies, acts on the decision and logs it.

Your AI agents

Copilot Studio agents
LangGraph or SDK agents
n8n workflows
Any MCP client
CAPABILLY gateway
1 · IdentifyWhich agent, acting for whom
2 · DecideEvaluate the call against your policies
3 · Act and recordRun, hold for approval, or block. Log it.

The gateway holds the system credentials. Agents never see them.

Control planePolicy Library, rule editor, simulation, reviews, approvals, evidence search and export

Systems agents reach

EHR and patient messaging
Student information system
File shares and data exports
Email, ticketing, SaaS tools
See the evidence log

Three actions, three decisions, one sealed log

Anatomy of a decision

One decision, three ways to read it

Engineers read the rule. Risk owners read the summary. Auditors read the record.

The rule
@id("HIPAA-07") @outcome("escalate") @approver("Clinical Operations") @timeout("30m") @on_timeout("deny") permit (principal, action == Action::"send_message", resource) when { context.data_classes.contains("PHI") && resource.recipient != "patient_self" };
The summary

When an agent sends a message with PHI to anyone other than the patient, hold it for Clinical Operations. If no one decides in 30 minutes, it is .

PackHIPAA Security Rule baselineVersionv4 · second-author reviewedIf unreachableFail closed
The record
{ "record": "A-20896", "agent": "Referral Coordinator", "on_behalf_of": "care-team", "rule": "HIPAA-07@v4", "decision": "escalate", "approver": "Clinical Operations", "maps_to": ["HIPAA 164.312(b)"], "prev": "sha256:4e1a…", "hash": "sha256:b6d0…" }
Getting started

Four steps to enforcement

1

Register or discover agents

CAPABILLY inventories agents that aren't registered and runs them in monitor-only mode.

2

Observe

See what a pack would decide on real traffic, with nothing blocked.

3

Simulate and review

Replay recent calls against a change. A second author approves every rule before it is enforced.

4

Enforce

Set each policy to fail closed or fail open if CAPABILLY can't be reached. Every decision is logged.

CAPABILLY · Rule editor · Simulate
CAPABILLY rule simulation screen
Reliability

Decide in advance what happens when things go wrong

Fail open or closed, per policy

A PHI export rule holds the action if no decision is possible. A low-risk read proceeds and is logged.

Local enforcement

The gateway keeps signed copies of your active policies, close to your systems.

Approvals that can't stall

Every escalation has a named approver and a time limit. Unanswered requests are .

Claim your Protobot pilotSee a Live Demo

See a Live Demo: a guided walkthrough with our team.