ACL helps existing app capabilities (APIs, MCP tools, Zapier actions, CLIs) become safer for AI agents to use. You define the allowed actions and checks, ACL runs the workflow, and every run produces a receipt.
Use the guided tutorial in /agenticflow. Run a request, inspect the generated ACL, then open the receipt summary and full JSON proof.
Use the playground to load a template, modify the steps, and run it directly. Start with read flows, then try preview/confirm patterns for writes.
If you are self-hosting ACL, open /platform and use the Onboarding Wizard to paste OpenAPI JSON, generate a starter pack, test a flow, and inspect receipts.
Run ACL locally, then open the UIs from the same server:
Use /platform (Onboarding Wizard) for the simplest app-team path. The other UIs are for demos and prototyping. For self-hosted protection, set ACL_PLATFORM_ADMIN_PASSWORD before starting acl serve.