SAFEROOM INSTALLATION
Installation paths
Your security program, wherever you already work.
Where it runs
| Surface | Install | Scope limiting* | Status |
|---|---|---|---|
| ChatGPT | Connector | — | Coming soon |
| Claude Code — CLI and IDE | VSIX Extension, or CLI | Yes | Available |
| Claude Desktop | Bundle | Yes | Available |
| Claude.ai | Connector | — | Coming soon |
| Copilot Studio | Remote MCP server | — | Coming soon |
| VS Code IDE + forks — Antigravity, Codex, Cursor, GitHub Copilot | VSIX Extension | Yes | Available |
* Multi-tenant users may limit the MCP per tenant scope using the IDE Extension.
Primary Deployments
What you need
What you get
Files land where you point them.
Saferoom does the transfer itself — name a path, get a file. Switch to Network mode and the agent fetches signed links instead, which needs an HTTP client on its end.
Fence the blast radius.
Lock the agent to one scope, a named set, or leave it open. Turn any tool off and it disappears from the agent's list — and is refused if the agent asks for it by name anyway. Local install only.
Watch it work.
The Event viewer is a live timeline of every call: tool, scope, outcome, duration. No payloads, no file paths, no tokens — not filtered out, never collected. Nothing written to disk.
Change your mind without restarting.
Switch environment, scope or tool selection and every connected agent picks it up straight away.
OAuth 2.0 with PKCE.
Your token lands in ~/.fmcode/credentials.json at 0600 and never leaves the machine.