new thing we’ve been building at @turnkeyhq: agent auth.  agents need credentials to do useful work. right now this means giving them passwords, api keys, oauth tokens, even totp seeds. this gives the agent far more access than the action actually requires  for years, turnkey has secured millions of private keys using verifiable TEE infrastructure. underneath that is a generic system for credentials, auth and policies, with human and machine authenticators, consensus, temporary and revocable access, and a full audit trail  now we are opening up these primitives for agent builders. 

the end user keeps sovereignty over their credentials while giving builders a way to easily grant scoped access based on the action it needs to take. 

a lot of agent builders are not thinking about security yet, but we think this becomes a critical product differentiator very soon. we want to make doing it correctly the easy path.  many of the pieces are already live:  •agents can retrieve encrypted secrets under programmable policies, including consensus and temporary or revocable access •they can sign git commits and authenticate over ssh without holding the underlying private keys •and of course if you want your agent to pay for things over crypto rails, turnkey already secures the wallets and enforces the policies for that too what’s next: we’re looking for agent builders who want to help shape what comes next. reach out or sign up below turnkey.com/agent-auth-beta