keycapGive your agent a budget, not your API key.
Grant layer for AI agents

Give your agent a budget,
not your API key.

Approve a grant once. Your agent and your app get a short-lived keycap token. A fast proxy enforces a hard dollar cap and adds the real key. A leaked token is worth at most its cap, and it expires on its own.

Get started

No password. Your passkey approves every grant, so an agent driving a browser can't approve on its own.


Sign-in works with Touch ID, Windows Hello, a phone or a security key.