AI agents are getting more powerful by the day, but that power is dangerous when they hold the keys to production systems. Goldcote’s new approach puts a physical human barrier — a fingerprint — between an autonomous agent and your live data.
A card appears, the owner approves with one fingerprint, and Connect sends it. Every key has its own write switch in MoltenRock, off until the owner turns it on with Touch ID.
A new Mac app lets AI agents propose changes in Stripe, Cloudflare and GitHub, but nothing is sent until a person approves it with Touch ID.
An approval button means nothing if the agent already has the key. With MoltenRock Connect, the agent never sees the key, and nothing goes out until the owner approves it.”— Sylvain Gordon-Horwood, Founder, Goldcote Ltd
ZüRICH, ZüRICH, SWITZERLAND, October 21, 2026 /EINPresswire.com/ — Goldcote Ltd has unveiled MoltenRock Connect, a macOS application that permits AI agents to suggest modifications across Stripe, Cloudflare and GitHub, yet transmits nothing until a human reviews the proposed action and authenticates it via Touch ID. Version 1.2 of MoltenRock Connect is currently available as a signed, notarized download from moltenrock.com.
Today’s AI agents can process refunds, modify DNS entries and merge pull requests. Typical configurations hand the agent an API key and let it operate independently. MoltenRock Connect flips that model: agents have unrestricted read access, but every write operation is routed into the HumanQueue, where a person makes the final call.
When an agent seeks a modification, the request surfaces in the HumanQueue using plain language: the platform involved, which agent made the request, the target of the action, any financial figures, and any warnings the system flags. For a Stripe refund, for instance, the card notes that issuing a refund does not terminate the subscription. The owner may approve the request, alter it, or reject it with feedback that the agent can read.
Every approval demands the owner’s Touch ID, or the Mac’s login password on machines lacking Touch ID. The prompt specifies the change, the amount, the platform, and whether it applies to live or test mode. No auto-approve rules exist for any amount, and approval is only possible within MoltenRock Connect’s dedicated window, which no agent request can access. Unanswered requests expire automatically after 72 hours, and nothing is transmitted.
Once approved, MoltenRock Connect executes the change itself. The agent never receives the API key, whether for reads or writes. This is the core design principle: an approval mechanism is meaningless if the agent can bypass it, and an agent holding the key can always call the service directly.
MoltenRock Connect integrates with MoltenRock, Goldcote’s Secure Enclave-backed credential vault for AI agents. Keys stored in the MoltenRock vault are shielded by the Mac’s Secure Enclave and are released to MoltenRock Connect only for the single sanctioned request, then discarded. Alternatively, keys can reside in the macOS Keychain within MoltenRock Connect. The application logs every proposal, approval, denial, cancelled prompt and transmission in an audit trail.
Platform coverage at launch:
Stripe: 38 pre-built cards, encompassing refunds, credits, coupons, invoices and subscription adjustments, with refunds, credits and discounts on those cards limited to 1,000.00. A general card addresses 327 of the 329 operations documented in Stripe’s API reference, with payouts, charges and transfers flagged in red along with their amounts. Customer names and addresses reach the agent as tokens unless the owner opts otherwise.
Cloudflare: 77 pre-built cards covering DNS, cache, firewall and WAF rules, redirects, and Pages and Workers deployments. A general card handles 1,851 of the 1,855 documented operations.
GitHub: pre-built cards for issues, plus a general card covering 560 of 572 documented operations, including merging pull requests, writing to branches and creating releases. Deleting a repository is highlighted in red.
MoltenRock Connect pairs with MoltenRockAI, Goldcote’s complimentary agentic chat application built around privacy and scoped access, which connects natively. It also works with Claude Code, Claude Desktop, Cursor and other MCP-compatible applications, as well as other local agents on the same Mac.
“An approval button means nothing if the agent already has the key,” said Sylvain Horwood, founder of Goldcote Ltd. “With MoltenRock Connect, the agent never sees the key. It does the reading and the preparation, and nothing that touches money, infrastructure or code goes out until the owner approves it on their own Mac.”
MoltenRock Connect 1.2 requires macOS 14.6 or later. The free tier connects two platforms and allows users to read, review and deny proposals. Approving changes requires MoltenRock Pro, with MoltenRock running on the same Mac (Apple Silicon or a Mac with a T2 chip). MoltenRock Connect, MoltenRock and MoltenRockAI are available at https://moltenrock.com.
About Goldcote Ltd
Goldcote Ltd develops local-first software for the AI-agent era, including MoltenRock, MoltenRock Connect, MoltenRockAI, MoltenMail and MoltenView. More information: https://goldcote.com
Stripe, Cloudflare, GitHub, Claude, Cursor, Touch ID and macOS are trademarks of their respective owners. MoltenRock Connect is not affiliated with or endorsed by them.
Sylvain Gordon-Horwood
Goldcote Ltd
Why it matters: As organizations entrust AI agents with increasingly sensitive operations, the gap between “can do” and “should do” widens. MoltenRock Connect’s hardware-backed approval gate offers a template for safe agent deployment, suggesting that the future of AI automation lies not in removing humans but in giving them meaningful, verifiable control.
