Agent Control Tower
Real provider keys stay behind the boundary.
Sign in to issue scoped agent passports, inspect governed calls, and stop access without distributing the credentials that power it.
Agentpublic passport
PassControlpolicy boundary
Vaultprovider key
PassControl control plane
Back to product
Operator access
Welcome back
Sign in to inspect and operate your governed agent fleet.
Your operator session controls privileged actions. Agent private keys remain browser-generated and provider keys remain in the Vault.