You hand your AI agents your real API keys, and one leak puts the bill on you. ShieldNode fixes that. Your agents get a revocable virtual key while your real key stays encrypted in the vault. When an agent asks, you approve or deny from your phone in one tap, with full context: agent, service, key, duration. ✦ Push approval from your phone ✦ Scoped, time-limited virtual keys ✦ Kill any key, or all of them, in one tap ✦ Works with any HTTP API, drop-in skill for any agent