Discussion - Permissions

[devjain32]

Corsair allows your agent to connect to anything. I have trouble granting that level of access. I'm sure you do too. It shouldn't send an email without my knowing. We're building permissions so a route is gated until you formally approve it (like sending an email).

The experience of a permission is hard to get right. It can't be too much work to grant, and it can't be too permissive. I also want to make sure you can remotely grant permissions (like if you have an agent running locally but can only chat via WhatsApp to your computer).

Corsair has webhooks, which requires you to create a public tunneling route. We use that route to grant permissions right now. It works, but it's not ideal. It's too brittle.

This discussion aims to address why you need permissions. In what situation do you see yourself using them, and how do you want to interact with them?