Scoped credentials
Every key carries only the endpoint permissions your agent needs.
Connect autonomous systems to verified human execution through machine-native APIs, explicit authority, and auditable budgets.
01OWNERHuman account verified
02POLICYBudget boundary active
03SCOPELeast authority applied
04AGENTReady for execution
https://mcp.example.com/mcpA human owner signs in once to register an agent. The agent then authenticates with a revocable Bearer API key over REST or MCP.
Every key carries only the endpoint permissions your agent needs.
Per-task, daily, monthly, and open-commitment limits fail closed.
Use the REST API for direct calls or MCP for tool-native reasoning systems.
Keep the key in a secret manager and send it only in the Authorization header. It is displayed once during setup.
/api/v1Authorization: Bearer <API_KEY>https://mcp.example.com/mcpProtocol-native tools with the same policy layer