PermitPipe gives AI agents scoped, revocable API access without exposing permanent keys. Create short-lived leases, enforce policies, proxy requests, and audit every action.
Built for developers connecting agents to real tools, APIs, and infrastructure.
Leases credentials for
The problem
Autonomous agents need access to APIs, databases, billing systems, repositories, and internal tools. Permanent API keys are long-lived, over-scoped, hard to audit, and dangerous when exposed through logs, prompts, or compromised agent environments.
The solution
PermitPipe lets agents request temporary credentials for a specific service, scope, and duration. Policies decide whether the lease is approved, denied, or escalated for human review.
How it works
Store a master key once. It is encrypted at rest and never exposed to an agent.
Set scope, duration, and approval rules per service and per agent.
Agents request short-lived credentials for a specific task and scope.
Requests are proxied through PermitPipe, enforced against policy, and logged.
Capabilities
Credentials that exist only for the task and expire on a hard TTL.
Grant the minimum scopes a task needs — nothing more.
Every lease has a deadline. No lingering long-lived keys.
Route sensitive scopes to a person before access is granted.
The agent calls a proxy endpoint; the master key stays server-side.
Every proxied request is recorded with scope and policy result.
Delete, admin, and secrets scopes are denied by default.
Prepaid USDC/SOL credits settled through Phantom on Solana.
Staking, fee discounts, and verified integration templates.
Example lease
Each request resolves to allowed scopes, blocked scopes, a duration, and a decision. The agent receives a proxy endpoint — never the underlying key.
{
"agent": "DevAgent",
"service": "GitHub",
"duration": "30 minutes",
"allowed_scopes": ["repo.read", "issues.comment"],
"blocked_scopes": ["repo.delete", "secrets.read", "pull_request.merge"],
"status": "approved"
}Policy engine
Every request is evaluated against your rules before any credential is issued. Dangerous scopes are blocked by default, sensitive actions require approval, and a single control revokes everything at once.
Billing
PermitPipe uses Phantom for USDC/SOL payments. Buy prepaid credits, renew plans manually, and apply PERMIT-based fee discounts — without making PERMIT the primary payment token. No automatic recurring charges.
Token utility
PERMIT is used for relay staking, developer fee discounts, verified integration templates, reputation, and security incentives. It is not required for basic usage and is not an investment.
Issue scoped, revocable leases and audit every request your agents make.