AgentAuth
A passport that lets agents log in safely.
Log in once and AgentAuth seals your credentials into an encrypted “passport” your AI agent can use without ever seeing the raw password. Access is scoped, time-limited, revocable and fully logged.
- Tests passing
- 160
- Commits
- 73
→Per-passport envelope encryption with rotatable keys
→Scoped, expiring, revocable agent keys
→Fail-closed: if the store is down, agents get nothing
Two ways to read it
In plain English
Log in once and AgentAuth seals your credentials into an encrypted “passport” your AI agent can use without ever seeing the raw password. Access is scoped, time-limited, revocable and fully logged.
For engineers
TypeScript on Fastify + Drizzle + Postgres with per-passport AES-256-GCM envelope encryption, rotatable keys, fail-closed design and phone-approved MFA.
What it does.
- Per-passport envelope encryption with rotatable keys
- Scoped, expiring, revocable agent keys
- Fail-closed: if the store is down, agents get nothing
Built with
- TypeScript
- Fastify
- Drizzle
- Postgres
- Vitest
- Docker
Status: Experiment · started June 2026 · open on GitHub