AI agents break things. Rollcage puts them back.
A Mac menu-bar app that snapshots your projects the moment Claude Code, Codex or Cursor starts, restores whatever they delete, and keeps them out of your .env files.
7 days free, then $39 once. macOS 14 Sonoma or later. Signed and notarized by Apple.
From “oh no” to “never mind” in one click.
- 1
An agent starts
Rollcage notices Claude Code, Codex, Cursor or any agent you list the moment it launches in a project.
- 2
Your project is cloned instantly
An APFS copy-on-write snapshot takes well under a second and almost no disk space, then again every 15 minutes while the agent works.
- 3
Something goes wrong
Files start disappearing. Rollcage counts them as they go and alerts you before you even look at the terminal.
- 4
You put it back
Pick the snapshot, see exactly what was deleted or changed, and restore the files you want, or the whole folder.
Your secrets stay yours.
The Guard plugs into Claude Code, Codex, Cursor and Gemini CLI. Before an agent reads a file or runs a command, Rollcage checks it.
It knows the secret files of every stack: dotenv, Rails, Laravel, Django, .NET, Terraform, SSH and cloud credentials, keys and certificates. It also catches the sneaky routes, like printing environment variables or reading them from a one-line script in Python, Node, Ruby, PHP or Go.
Destructive commands are blocked outright or paused until you approve them. You decide which.
- Blocked
cat .env.localsecret file - Blocked
printenvdumps environment variables - Blocked
python3 -c "import os; print(os.environ)"reads env vars in code - Blocked
cat config/master.keyRails credentials key - Blocked
rm -rf ~deletes your home folder - Asks you
git reset --hardthrows away uncommitted work - Asks you
git push --forcerewrites shared history - Allowed
cat .env.exampletemplate, no secrets
Quiet in the menu bar until you need it.
- Auto-protect
- Start an agent inside any git repository and Rollcage starts protecting it. No setup per project.
- Mass-delete alarm
- A notification when 100 files vanish in 10 seconds, or the folder itself disappears. You choose the numbers.
- Restore that never deletes
- When you restore, the current versions are moved aside, not thrown away. Nothing is ever lost twice.
- Snapshot scheduler
- Every 15 minutes while an agent is running, plus an optional fixed schedule for everything else.
- Activity timeline
- Every agent session, snapshot, restore and blocked command in one searchable list.
- Stays on your Mac
- Snapshots live on your own disk. No account, no cloud, no telemetry.
One price. Yours to keep.
Try every feature free for 7 days, no card needed. Buy only once you know it's right for you: all sales are final.
- Snapshots, restore and the mass-delete alarm
- Secrets and command Guard for every supported agent
- Auto-protect and the snapshot scheduler
- Use one key on up to 3 of your Macs
- All version 1 updates
Secure checkout by Stripe. Your licence key arrives by email.
Questions
Does it slow down my Mac or my agents?
No. Snapshots are APFS clones, which copy file references instead of data, so even large repositories are cloned in well under a second. The Guard check adds a few milliseconds to each agent action.
How much disk space do snapshots use?
Almost none until files change: a clone shares its data with the original. Rollcage keeps snapshots for 7 days or 50 snapshots by default, and you can change both.
Which agents does the Guard work with?
Claude Code, OpenAI Codex CLI, Cursor and Gemini CLI, through each tool's official hooks. Snapshots and the delete alarm work with any agent, including Aider, OpenCode, Goose and Amp.
Can an agent still get to my secrets?
The Guard stops agents from opening secret files, printing environment variables and reading them with one-line scripts. It can't see inside a program an agent writes to a file and then runs, so keep production keys out of your local .env and give agents test keys.
Is Rollcage a backup?
It's an undo button for agent mistakes, kept on the same disk as your projects. Keep using Time Machine and git for real backups.
Why isn't it on the Mac App Store?
App Store apps have to run in a sandbox that would stop Rollcage from seeing running agents and installing the Guard. It's signed with an Apple Developer ID and notarized by Apple instead, so it opens without warnings.
How does the licence work?
Pay $39 once and the licence key arrives straight away, on screen and by email. One key works on up to 3 of your Macs; to move it, remove it from an old Mac in Rollcage › License. Updates for version 1 are included.
Can I try it before I buy?
Yes, that's what the 7-day trial is for: every feature, no card, no account. Because the trial lets you test everything first, all sales are final and we don't offer refunds.