Agent Control Tower
Real provider keys stay behind the boundary.
Sign in to issue scoped agent passports, inspect governed calls, and stop access without distributing the credentials that power it.
Agentpublic passport
PassControlpolicy boundary
Vaultprovider key
PassControl control plane
Back to product
Invite-only access
Create your control plane
Open your personal invitation link, then create the operator account bound to that invitation.
By creating an account, you agree to the beta terms and acceptable use policy, and acknowledge the privacy notice.
Your operator session controls privileged actions. Agent private keys remain browser-generated and provider keys remain in the Vault.