Launching today
AgentKeyGate
Give AI agents a 10-minute API pass, not your key
1 follower
Give AI agents a 10-minute API pass, not your key
1 follower
Free, self-hosted gateway. Your AI agent asks for temporary API access, you approve in Telegram or on the web, and the gateway adds your key to each call and closes the pass on time or call limit. The agent never sees the key. Apache-2.0.
Free
Launch Team
CloudflareStill paying to deploy your apps? Try Cloudflare Workers for free
Promoted
Hi, I'm Maxim, the maker. I set up AI agents for small companies, mostly against their CRM, and every setup ended with a long-lived API key in the agent's config.
AgentKeyGate sits between the agent and the API. The agent asks for access with a reason, a time limit and a call limit. I approve in Telegram or on the web, or a standing policy approves it. The agent gets a pass, and the gateway adds the key, counts the calls and filters the response. For CRMs the keys are read-only by default and you pick the fields the agent can see, with e-mails and phones masked if you turn that on.
It is free and open source (Apache-2.0), and it runs on your own server. It speaks MCP over Streamable HTTP and also ships as an Agent Skill.
What to know before you try it: there is no public demo yet (the GIF shows the real flow). The configs for Claude Code, Codex, Cursor and others follow each client's docs and are not all checked live. Root on the server can read the keys, and there has been no external security audit.
I'd like to hear where this breaks for your setup.