psh.now
The open source alternative to letting your agent decide alone
Auto-approve, a prompt in a terminal nobody is watching, or a hosted service you cannot inspect. psh.now is the fourth option: MIT licensed, self-hostable, and one tap from wherever you are.
A page for each named tool
Categories are useless when you are choosing. Each of these pages names a real product, says what it does well, and then says where psh.now differs and when you should pick the other one.
Pushary
Hosted, $59 a month, real push notifications to the lock screen, per-tool policy in hooks. They win on reach and enforcement, we win on licence, self-hosting and no per-seat price.
AgentPeek
A Mac command centre: 26 agents in the notch, permissions by keystroke, token spend on a gauge, $14.99 once. It wins when you sit at that Mac; we win when the approver is on a phone.
Four ways to answer an agent
Every harness faces the same question: what happens when the agent needs a human? These are the usual answers, compared on the two things that matter, who decides, and whether you can check.
| psh.now | Auto-approve (YOLO) | Terminal prompt | Closed hosted hub | |
|---|---|---|---|---|
| Who makes the decision | ✓ You, on any device | ✗ The agent | ✗ Whoever is at the keyboard | ✗ You, in their cloud |
| Runs unattended without risk | ✓ Yes | ✗ It runs everything | It stalls | It stalls |
| What leaves your machine | The question only | - | Nothing | The question, their servers |
| You can read the source | ✓ MIT, on GitHub | n/a | n/a | ✗ Closed |
| Self-hostable | ✓ Docker, your VPC | n/a | n/a | ✗ No |
| Cost | ✓ Free | ✓ Free | ✓ Free | Per seat |
| Setup | About a minute | None | None | Account and integration |
Categories, not products: the comparison is about the shape of the decision. See the docs for what psh.now actually does.
An open source alternative to auto-approve
Auto-approve turns every guardrail off at once: --yolo, --dangerously-skip-permissions, a loop that never asks. It is fast right up to the first irreversible command. psh.now keeps the agent asking and puts the answer where you already are. The agent still waits, but for a tap, not for you to be at the keyboard.
Risky steps still ask
The commands you would want to see (force-push, sudo, a migration, anything that spends money) stop and wait for a person.
The human is not the bottleneck
A tap on a phone clears the request in seconds, so leaving auto-approve on does not turn into leaving the agent stalled.
An open source alternative to a hosted approval service
Hosted approval products work, and for many teams the convenience is the right trade. The difference is what you cannot see: which regex routes a command to "safe", what the retention policy really is, and what happens to your prompts on their servers. psh.now is a small MIT-licensed server you can read, run and fork.
Read every rule
The routing that decides whether a command needs a human is a few hundred lines of TypeScript in a public repository.
Keep the questions home
Self hosting puts the database and the mail in your own infrastructure. Nothing about your agents leaves your VPC.
An open source alternative to building it yourself
A webhook, a Slack bot and a database is a weekend of work and a permanent thing to maintain, and it still does not work from a locked phone. psh.now is the same shape (one HTTP call in, one boolean out) already written, with the app, the keys and the install script done.
One call, one boolean
POST a title and a message; get true or false back. Nothing to learn, nothing to poll.
Fork it if the rule is wrong
MIT means the answer to a missing feature is a branch, not a feature request.
Why open source is the point here
An approval layer sits directly on the path to your production systems. Whoever controls it decides what your agents are allowed to do. That is a bad place for a black box, and a worse place for a per-seat meter.
MIT licensed
Both the server and the skill are MIT licensed at github.com/passy-ai/psh-now, no open-core asterisk, no seat count.
Self-hosted by default if you want it
Docker Compose, your Postgres, your mail. The hosted instance is a convenience, not the product.
No lock-in
The protocol is one HTTP request. If you ever leave, your agents keep working and your history stays in your database.
Give Your Team One Answer
Open source and MIT licensed. One channel, every agent, and the person on call answers from wherever they are.