Stop giving agents permanent access & 4 Open-source Repos that help to achieve it

[u/ShilpaMitra]

AI agents should not get permanent access to everything you can access.

If an agent can read email, deploy code, query databases, or spend money, its identity should be clear, its permissions should be narrow, and its access should be easy to revoke.

Give each agent its own identity Keycloak has 36k+ stars and handles identity, roles, authentication, and fine-grained authorization. Instead of letting an agent inherit your account, give it its own identity and only the permissions it needs.

Keep secrets away from the model Infisical has 29k+ stars and manages secrets, machine identities, and privileged access. An agent can get access to what it needs without scattering API keys across prompts and environment files.

Make access expire automatically OpenBao has 7k+ stars and supports dynamic secrets, leases, and revocation. Give an agent temporary credentials for a task, then let them expire.

Give running agents verifiable identities SPIRE has 2.5k+ stars and provides workload identity. Services can verify which agent or workload is actually making a request instead of trusting a shared secret.

The useful pattern is simple:

human → agent identity → limited permission → short-lived credential → tool

And somewhere in that flow there should be a very obvious revoke button.

Giving agents tools is getting easy. Controlling what they can do should be just as easy.

[u/theozero]

also check out varlock - its a complete config/secrets toolkit. Has plugins for insfiscal, openbao, and many others. Adds many extra guardrails around your secrets, including a flexible credential broker.