KeyContain

What makes it different

AI agents need API keys to do real work — read Gmail, create QuickBooks invoices, push to GitHub — but a single shared key hands them the kingdom: one prompt injection or one over-eager agent can send email to anyone or delete what it should only read. KeyContain gives each agent its own key and decides, per API and per action, what that agent may do.

Every request falls into one of three buckets. Allowed requests go straight through. Ask me requests wait for your confirmation in the KeyContain app or browser, with a plain-language summary of what the request does. Everything else is refused with a message the agent understands. In the product demo, an invoice-runner agent asks to create a $2,150 invoice for Northwind Traders — the request waits until a human approves it.

The model covers the services agents actually touch: Gmail, QuickBooks, GitHub, Cloudflare and almost any other API, with per-action scoping down to individual operations like messages.send or drafts.create. KeyContain is free to start, with docs and a security page for teams wiring agents into production systems.