AI agents deploy sites, run reports and fix things. They need API keys to do it. Pasting keys into a chat is how keys leak. Agent accounts are the alternative we're building.
How agent accounts will work
- Its own account, with a person in charge. Each agent has its own keys and a human sponsor who answers for it.
- Only what you grant. An agent sees only the shared folders you give it. Never anyone's personal vault, and it can't change who has access.
- Every read on the record. For sensitive folders, the agent must give a reason each time it reads a key, and the read is logged before it gets the key.
- Ask first for the crown jewels. Mark a folder so the agent has to wait for a person to approve each read.
- Short sessions. Agent sign-ins last 15 minutes and are tied to one machine.
- A stop button. Pause an agent instantly. Remove it, and Vikela lists every key it read in the last 30 days so you can replace them.
What it won't do
If the computer an agent runs on is broken into, anything the agent has already read in that session is exposed. The controls above limit how much that is and make it easy to spot and clean up. Keep each agent's access small.
Stuck? Email support@auxodigital.africa and a person will help.