Stilops · AI agents for businessesWatch the work happen, before it happens.

A Stilops agent rehearses every task in full first — the same steps, the same outcome, only without the consequences. You see the drafts, the amounts and the recipients, and underneath: 0 emails sent, 0 records changed. Only once you approve does it happen for real. So you're not approving an intention, you're approving an outcome.

How it works

Propose. Test run. Approve.

01

The agent proposes

Your agent watches its patch — the inbox, the ledger, the ticket queue — and when there is work to do, it writes a concrete proposal: what it wants to do, and why.

02

It rehearses the task itself

Not a simulation up front in a test environment, but a rehearsal of this task, now, in your own environment — the same steps, the same outcome, only without the consequences. You see the drafts, the amounts and the recipients, and underneath: 0 emails sent, 0 records changed.

03

You approve — then it runs

Only your explicit approval executes the action. Decline, and nothing happens — and then it costs you nothing either: a declined proposal doesn't count (up to three times your included tasks per month), and an approved test run plus the real execution count together as one task, not two.

What you don't see

The mechanism under the promise.

Plenty of tools now offer approval before an action. The difference is in what sits underneath, and you can't see that in a screenshot. This is what's in the code — nothing more than that.

01

You approve what you saw, not something like it

On approval, a fingerprint (SHA-256) is computed over the task and the plan that was on your screen. If it differs from what is stored at that moment, the approval does not go through. And the approved plan goes along as the instruction for the execution: not a new plan, but the one you saw.

02

The test run only gets reading tools

A test run runs with a fixed set of tools that can only read and look things up, on the web included. Writing, sending e-mail or changing a record is not in it — that isn't a setting that can be switched off, it's the set it is given.

03

Test run and execution are two separate records

On approval the test run is not overwritten: the execution becomes its own record, linked to the test run you approved. The retention period you set cannot be shorter than 183 days, and only a meeting transcript can be deleted by you.

04

A proposal is never approved automatically

No confidence score, no routine approvals that start going through on their own over time. A proposal from your agent always waits for a human — that's fixed in our mission, and that's how execution for customer agents is built.

05

Servers in Germany, and what doesn't stay there

Stilops runs on servers of Hetzner Online GmbH in Germany, within the EU, and the mail Stilops sends you — from password reset to ticket reply — also goes through Hetzner, under a data processing agreement. Not everything stays in the EU: among others, the model calls go through Anthropic in the United States. Every processor is listed in the privacy policy, with the trade-off spelled out.

06

An AI Act file, without a seal

There is an AI Act file, and its classification is limited risk. There is no CE marking and no certification, and we don't claim any. Where we stand per article — confirmed, partial or still open — you read not here but in our public compliance register.

Every point above can be found in the product's code or in the compliance file. No promises about what's still to come.

Roles & pricing

You hire a role, not a build-it-yourself kit.

Most AI tools start you on an empty canvas: drag the steps, figure out the connections, then maintain it yourself. At Stilops you pick a function from the catalogue, with a defined scope and a fixed monthly price. From then on it works exactly as above: propose, rehearse, wait for you.

Filter by industry

 

Bookkeeping Support

Helps process receipts, invoices, and routine bookkeeping questions.

€ 249/mo · 25 tasks included

Administrative Assistant

Handles routine paperwork — invoices, data entry, and document organization — so nothing falls through the cracks.

€ 99/mo · 45 tasks included

Customer Service

Drafts replies to customer support conversations and triages incoming requests.

€ 229/mo · 100 tasks included

Secretary

Manages your calendar, drafts correspondence, and keeps your inbox and appointments organized.

€ 109/mo · 50 tasks included

All 31 roles in the catalogue are listed above, from € 99 to € 499 a month. All prices are per month, excluding VAT. Need more tasks than are included? You pay per extra task — from € 2.50 — and only after you've agreed to that yourself. A test run doesn't count as a separate task; declined test runs are free up to three times your included tasks per month.

See the full catalogue

Connections

Your agent works inside your systems.

An agent that only lives in its own window is a chat window. So in the portal you connect your own systems: a REST API with your own key, or an MCP server. From then on every agent in your organization can read from it — also in a test run — and, if you allow and approve it, write to it. Every call is logged. With a key from the service itself it works directly for Moneybird, Mollie, Sportlink, KVK Handelsregister, bol (Retailer API), Shopify, OpenRouteService, Slack, Zendesk, TopDesk and Figma; Exact Online, Google Workspace, Microsoft 365 and Teams only issue OAuth tokens, so a guide first walks you through an app registration:

  • Moneybird — key
  • Slack — key
  • Zendesk — key
  • TopDesk — key
  • Figma — key
  • Mollie — key
  • Sportlink — key
  • KVK Handelsregister — key
  • bol (Retailer API) — key
  • Shopify — key
  • OpenRouteService — key
  • Exact Online — OAuth, guide
  • Google Workspace — OAuth, guide
  • Microsoft 365 — OAuth, guide
  • Microsoft Teams — OAuth, guide

And anything else you connect

These are presets, not a closed list: any REST API with a bearer token, API key or basic auth works, and so does any MCP server. An agent only ever talks to the connection's base URL, never to another host. Your key is stored encrypted, is no longer visible in the portal after you save it, never appears in an agent's output, and an agent never asks for it in chat.

Is your system missing, and does it have no REST API or MCP server? The Integration Specialist (€ 449/mo) is a role that writes the connecting code and delivers it as a documented, downloadable project.

Industries

One mechanism, any line of work.

You're not picking an industry package — you're hiring a role. But the work those roles take over looks different per field, and the mechanism stays the same everywhere: prepare, show exactly what would happen, and nothing leaves the building until you approve it.

Core values

What we stand for.

Five touchstones any decision — in the product and in the company — can be held against.

The approval moment doesn't shift

There's an appealing idea in this market: let the system learn which approvals you always wave through, and have it take those over in time. We deliberately don't. No auto-approval, no confidence score that lets an action skip the queue, no silent mode. The moment doesn't get lighter the longer you're a customer — what gets lighter is your work around it, because there's nothing to double-check that you haven't already seen.

Quiet until it matters

A Stilops agent does not fill a dashboard with noise. The line stays flat until there is a proposal that genuinely deserves your look — and only then does it light up.

Everything on the record

Every proposal, every test run result and every decision is kept. You can always see what an agent did, what it wanted to do, and who approved it.

Clearly bounded

You hire an agent for one business function, with a defined scope and a fixed monthly price that's right there on this page. No surprises about what it may touch or what it costs.

Nothing breaks before it is configured

A half-configured environment never breaks anything or makes it unsafe. Safe defaults are the starting point, not the exception.

Security & trust

Safe, because nothing happens silently.

At Stilops, security is not an afterthought but the starting point: an agent cannot do anything irreversible on its own. On top of that come the usual technical safeguards.

Approval is the brake

No consequential action runs without your explicit approval. That is not just how Stilops works — it is the primary security control: an agent cannot execute anything silent, irreversible or unseen.

Scoped access

Every agent works within a single function, with a well-defined scope. You decide what it may see and touch; beyond that it does not go.

Full audit trail

Every proposal, test run and decision is recorded in an append-only log. You can always trace who approved what, and when.

Account security

Two-factor authentication (MFA) available on every account. Passwords are stored with strong, salted hashing, and session cookies are http-only and travel only over encrypted https connections.

As little data as possible

Only functionally necessary cookies, no tracking without consent. Payments run through Stripe — credit-card details never reach our servers.

Want to see where we stand per framework — including what is still open? Our compliance register is public and live. View the compliance register

Frequently asked questions

Questions, answered briefly.

The questions we hear most about who Stilops is, how it works, and what to expect.

What is Stilops?

Stilops lets your organization hire AI agents for a specific business function — finance, support, legal, logistics and more. Every agent is built on Claude and always works the same way: it proposes its work first, rehearses it as a test run with no side effects, and only executes once you have approved it.

How does approval work?

In three steps. The agent writes a concrete proposal, rehearses it as a test run so you see exactly what would happen, and then waits for you. Only your explicit approval actually executes the action — decline, and nothing happens.

What exactly is a test run?

A rehearsal with no consequences — of this task, now, in your own environment. Not a simulation up front in a test environment to see whether the idea holds, but the same steps with the same outcome, only without anything leaving the building. The agent prepares everything — drafts, amounts, recipients — and shows you the result, but sends nothing and changes no record. So you're judging an outcome, not an intention.

Do I have to approve everything?

No — only what can change something. An agent that can only read and look things up (without connections) produces a report right away; there is nothing to execute, so nothing to approve. Whether a task is like that, Stilops decides from the tools the agent gets, never from the wording of the task.

Does a test run cost me anything?

No. Decline the proposal and nothing happened, so nothing counts. Approve it and let the action run, and the test run and the execution count together as one task against your quota, not two. There is one limit: test runs that don't become a task are free up to three times your included tasks per month — with 50 included tasks, that's 150 — and beyond that, each further test run counts as a task. You can see where you stand on your usage page; ordinary use never gets near it. Why this way? A system that charges you for the moment you pay attention teaches you, over time, to pay less attention.

What does an agent cost?

From € 99 to € 499 a month excluding VAT, depending on the role — the price per role is on this page and in the catalogue. Every role includes a number of tasks per month: 100 for Customer Service, 50 for the Secretary, 8 for the heaviest build roles. Go beyond that and you pay per extra task (from € 2.50), and only after you've agreed to it yourself; without that agreement the agent simply stops until next month.

Do I have to build a workflow myself?

No. There's no canvas of nodes for you to set up and maintain. You hire a role from a catalogue of 31 functions — Secretary, Customer Service, Bookkeeping Support, Legal Support, Website Builder and so on — and that role knows what its job is. All you do is judge what it puts in front of you.

Which systems can an agent work with?

The ones you connect yourself. In the portal you add a REST API with your own key (bearer token, API key or basic auth) or an MCP server; from then on it's available to every agent in your organization. Reading is always allowed, also in a test run; writing only if you enable it on the connection, and even then only in a live run you approved yourself. For Moneybird, Mollie, Sportlink, KVK Handelsregister, bol (Retailer API), Shopify, OpenRouteService, Slack, Zendesk, TopDesk and Figma the portal prefills the form and it works directly with a key from the service. Exact Online, Google Workspace, Microsoft 365 and Teams only issue OAuth tokens: you first have to register an app yourself, and a guide walks you through it. If your system has no API, there's an Integration Specialist role that writes the connecting code.

Does the approval moment get lighter once the system has proven itself?

No, and that's a choice. Other vendors let routine approvals pass automatically over time, based on a confidence score. At Stilops the moment stays exactly where it is, even after years. On the good days you won't notice the difference; you'll notice it on the one day something goes wrong, and by then it's too late to ask for it back.

Which industries and functions is Stilops for?

The mechanism is the same for every field. Organizations put Stilops agents to work in legal, logistics, real estate, construction, financial advice, retail, software and consultancy, among others — always for a well-defined function with a fixed scope.

Who stays in control of what an agent does?

You do, always. No consequential action runs without a human approving it. And every proposal, test run and decision is kept, so you can always review what an agent did, what it wanted to do and who approved it.

Is my data safe?

Security is the starting point: an agent cannot do anything irreversible on its own — only your approval executes anything. On top of that come the usual safeguards: two-factor authentication (MFA) you enable per account, strongly hashed passwords, http-only session cookies over https, an append-only audit trail, and only functionally necessary cookies. Payments run through Stripe, so credit-card details never reach our servers.

How do I get started?

Create an account in the portal and hire your first agent. Shortly after, you will see the first proposal come in — and there too, nothing happens until you approve it.

Ready when you are.

Create an account, hire your first agent, and watch the first proposal arrive. Nothing runs until you approve it — that is the whole point.

Create your account

Stilops only uses strictly necessary cookies (signing in, language preference, and in the demo your demo session and a counter against abuse) — no consent needed for those. We only count anonymously how many pages are viewed per day and which website visitors come from — without cookies and without storing anything about you. Analytics that follows you would only run after you agree here.