The vault between your agents and every API

agent.pw handles secure token handoff, credential injection, and profile-backed API access so agents can act without ever seeing provider secrets.

APIs

No profiles yet

Add a credential profile or connect through the managed catalog.

Without vs with agent.pw

Same task, different integration surface.

Without agent.pw

store raw keys in agent context:
LINEAR_API_KEY=lin_...
GITHUB_TOKEN=ghp_...

api.linear.app/graphql
api.github.com/repos

rotate + secure every key separately

With agent.pw

npx agent.pw profile add linear --host api.linear.app
npx agent.pw cred add linear

curl -H "agentpw-token: apw_..." \
  api.agent.pw/proxy/api.linear.app/graphql

Features

Secure credential proxy

Agents get revocable tokens — provider secrets never enter agent context. One URL pattern for credential injection and proxying across every API.

Credential profiles

Profiles match target hosts and describe how credentials should be collected and injected when a service is non-standard.

Managed catalog

Managed agent.pw overlays a public catalog of profiles and managed OAuth clients on top of the core OSS proxy engine.