Every agent gets its own limits
Allow, ask or block by person, role, app and action. Even by amount.
Maria Refunds to $50
AllowAskBlock
Jonas Change deals
AllowAskBlock
Anyone Delete
AllowAskBlock
Your agents get the keys. You hold the ring.
Connect 100+ apps once. Every AI agent gets only what your company allows, and every action is on record.
Real access for your agents.
Real limits from you.
Big moves wait for a yes
The right person sees the exact change. Once approved, only that exact change can run.
Refund $480 on order 4412?
Waiting for Maria
Maria approved. Refund sent.
Agents never see your logins
Logins stay encrypted inside Valet. If an agent's key leaks, you revoke one key, not every app.
The agent holds
Its own Valet keyvk_••••3fQa
Locked inside Valet
Stripe••••••••••••
HubSpot••••••••••••
Every action has a name on it
Who did it, in which app, and what happened. Entries can't be edited or deleted.
MariaRead invoicesAllowed
JonasUpdate a dealWaiting for a yes
CI keyDelete a branchBlocked
MariaWrite a pageAllowed
JonasList issuesAllowed
MariaRead invoicesAllowed
JonasUpdate a dealWaiting for a yes
CI keyDelete a branchBlocked
MariaWrite a pageAllowed
JonasList issuesAllowed
Someone leaves? Access stops in 30 seconds
Disable one person and all their keys and agents go with them.
Jonas disabled3 keys revoked2 agents signed out
Your own systems, same rules
Add an in-house system as a custom app. New tools wait for your review before any agent can use them.
Harbor stock systemConnected
delete_stockWaiting for review
+ Paste your server's address
One key. Any agent.
Create a key, add one server, and your agent can search and use every app you allow.
# add Valet to Claude Code
claude mcp add --transport http valet ...
Connected to Valet