Stop asking users for raw API keys.
Agent Consent Flow lets users approve exactly what an AI agent can access—without pasting raw API keys into your app.
Stripe Payment Monitor
Verified PublisherMonitors failed payments and opens a GitHub issue automatically.
Requesting access to
Your credentials are never shared with the agent author. All access is logged and you can revoke at any time.
Hosted consent screen available to registered private-beta clients.
The API key copy-paste problem.
If you build an AI tool today, getting access to a user's data usually means asking them to copy a raw API key from Stripe or GitHub and paste it into your settings page. It's a massive friction point, it violates least-privilege, and it forces you to take on the liability of storing their secrets.
High user friction
Users hate hunting for API keys. It breaks them out of your onboarding flow and asks for an unreasonable level of trust before they've even used your product.
Massive over-permission
Most API keys grant root-level access. A tool that just needs to read issues shouldn't have the power to delete repositories, but raw keys rarely allow granular scoping.
Your liability
When users paste their keys into your app, you are now responsible for securing them. If your database is compromised, your users' infrastructure is compromised.
A better way to get access.
Agent Consent Flow implements a signed request, authenticated approval, one-time code exchange, and revocable opaque token flow around independently conformable AIP Consent.
Register exact boundaries
Register an ES256 public key, exact callbacks, and the maximum scopes your client may request.
Sign each request
Use a short-lived signed request, unique ID, callback state, and S256 PKCE challenge.
Users review access
Let users inspect every requested scope before an authenticated approval decision.
Exchange and verify
Exchange a one-time code for an opaque token, then introspect its active scopes at runtime.
Open Standard
Built on AIP
AIP defines the normative Consent requirements and remains unchanged. Agent Consent Flow is one implementation around that independently conformable section, not a new or competing standard.
What Agent Consent Flow provides
Zero key exposure
The protocol never returns a user's underlying vault credentials. Clients receive a short-lived opaque token representing only approved scopes.
One-click revocation
Users can revoke a grant independently, immediately invalidating its active access tokens without rotating an underlying credential.
Full transparency
The hosted consent screen makes every requested scope visible before approval, and expansion always requires a new decision.
Build a signed consent flow.
Register a private-beta client in Gazebo, keep your signing key on your server, and integrate the complete request, approval, exchange, introspection, and revocation flow.