knight

knight

Building a safer agent system
All activity
Today, when users hand credentials to AI agents, they have two options: paste an API key into the agent's config, or grant full account access via OAuth. Once handed over, control is lost — users don't know which credentials the agent used, what resources it accessed, or whether it passed credentials to downstream agents.
Agent Credential Vault
Agent Credential VaultThe Credential Butler for Agents
knightstarted a discussion

How do you let your AI Agent use your personal accounts

How do you let your AI agents use your accounts securely? I'm a heavy agent user — my agents read emails, manage Notion, create PRs daily. But credential management is a constant headache: pasting tokens into prompts risks theft, storing them in .env risks accidental commits, once an agent has your token it gets full access with no fine-grained control, there's no way to revoke after use,...