What it does
It sits between your agent and your machine.
Every tool call stops here first. You see the command, the risk, and the diff — then decide.
Answer from the notch
Deny, Allow Once, Always, or Bypass without leaving what you're doing. ⌘⇧Space from anywhere; keys 1–4 answer the top prompt; or reply straight from the system notification.
See the risk before you approve
rm -rf, curl | sh, sudo, writes outside the
working directory, edits to .ssh or .env, force-pushes —
all flagged. Edits show the actual diff, not a file path.
Engagement scope
Hosts, domains, or CIDR blocks in a file. Anything reaching outside is flagged — and scope overrides every convenience rule you've set.
Reports you can hand over
Every decision logged locally. Export any date range as Markdown: denials, high-risk calls, per-project volume.
Live sessions
Project, terminal, context tokens, current tool, git branch and uncommitted files. Interrupt one without switching windows.
Be clear about this
What it isn't
A review aid, not a security control. The risk and scope checks are heuristics. They will miss things.
It deliberately fails open. If the app isn't running, Claude Code's own permission flow proceeds untouched — so it will never wedge your shell, and equally it won't save you when it isn't running. Don't make it the only thing standing between an autonomous agent and something you care about.
Privacy
It reads your work. It never sends it.
Transcripts, commands, file paths, client hostnames — all of it stays on your Mac.
No account. No telemetry.
There is no server to send anything to. Your licence is verified offline with a signature, so the app never phones home — it works on an air-gapped machine, and it can't stop working because a service went down.
Two requests, ever
A daily version check, and album art if you switch the Spotify widget on. Both optional, neither carries anything about you. Read the full policy →
Launch price
One payment. No subscription.
- Every Mac you own
- Free updates within this major version
- 14-day trial first — no card
- 14-day refund, no questions
- Safety features keep working even if your licence lapses
BTC, ETH, USDT, USDC, LTC, XMR and more. Your key is issued the moment the
payment confirms — no account, no email required.
5-seat team licence: $119
Before you buy
Two honest caveats
Requirements
macOS 14 or later, Apple silicon or Intel, and Claude Code installed. A notch isn't required — on other Macs the island sits under the menu bar.
It depends on Claude Code's hooks
Sentry Notch works by registering a PreToolUse hook. That interface
belongs to Anthropic and could change. I'll keep pace, but I can't promise
compatibility with software I don't control — so buy it for what it does today.