Grant layer for AI agents
Give your agent a budget,
not your API key.
Approve a grant once. Your agent and your app get a short-lived keycap token. A fast proxy enforces a hard dollar cap and adds the real key. A leaked token is worth at most its cap, and it expires on its own.
Get started
No password. Your passkey approves every grant, so an agent driving a browser can't approve on its own.
Sign-in works with Touch ID, Windows Hello, a phone or a security key.