YesPaPa

Johnny Johnny? Yes Papa. Running rm -rf? No Papa. Telling lies? Open your terminal! one-tap approve or deny dangerous AI commands from your phone. Fully Open Source!

YesPaPa is the human-in-the-loop safety layer for AI coding agents. When an LLM agent or script tries to run a destructive command — like rm -rf, git push --force, or DROP TABLE - YesPaPa intercepts it and sends an approval request straight to your phone.

How it works:

• Install the YesPaPa CLI on your machine
• Scan the pairing QR code with this app (or use offline mode with totp)
• Dangerous commands are intercepted and held until you approve

Approve with confidence:

• One-tap approve or deny from a push notification
• See the full command, AI crafted justification, and context before deciding
• Approve with a message to guide the agent's next steps
• Set Auto-Bypass (grace periods) for trusted command patterns

Built on real security:

• TOTP-based authentication (RFC 6238) - works offline too
• Zero-trust architecture - approvals are cryptographically verified
• Tamper-resistant - agents cannot bypass or uninstall their own guardrails(read the docs.yespapa.io for advanced use)
• Falls back to manual TOTP codes if the server is unreachable(self hosting included!)

Perfect for:

• Developers using OpenClaw, Claude Code, Cursor, Copilot workflows, or other AI coding assistants
• DevOps engineers running automated scripts on production systems
• Teams that need human approval gates for destructive operations in CI/CD pipelines
• Anyone who wants a safety net before irreversible commands execute

YesPaPa works with any shell on macOS and Linux. The CLI is open-source at github.com/yespapa-cli. Docs available: https://docs.yespapa.io