Question 1

What is AgentKey?

Accepted Answer

AgentKey is a security and authorization layer for AI agents. It sits between AI agents and the systems they touch, enforcing fail-closed permissions, preventing unauthorized actions with single-use execution tokens, managing human approvals, and generating cryptographically signed, offline-verifiable audit evidence. It is built for AI agents and MCP workflows.

Question 2

How does AgentKey prevent unauthorized AI agent actions?

Accepted Answer

In enforce mode, every tool call routed through AgentKey is checked against defined permissions before it runs, and an approved action can be bound to a single-use execution attempt that expires after use. An action that is not explicitly allowed is denied by default. In the default observe mode the same checks run and are recorded, with would-block markers, without blocking. Protection applies to calls routed through the SDK or the MCP bridge.

Question 3

What is fail-closed permission for AI agents?

Accepted Answer

Fail-closed permission means that if AgentKey cannot verify an action is allowed, the action is blocked by default. This is the opposite of fail-open systems where unclear permissions allow actions through. Fail-closed is the safer approach for AI agents that may attempt unexpected or harmful actions.

Question 4

How does AgentKey protect against prompt injection?

Accepted Answer

AgentKey scans untrusted content before it reaches the model and validates every tool call routed through it against an explicit permission policy. In enforce mode, a call blocked by policy or by a quarantined input scan does not run; in the default observe mode the same call is recorded with a would-block marker instead of being blocked. This covers tool calls routed through the AgentKey SDK or MCP bridge; it does not intercept calls made outside the integration.

Question 5

What is MCP security in AgentKey?

Accepted Answer

MCP security in AgentKey refers to protecting Model Context Protocol servers and the AI agents that connect to them. AgentKey adds a security layer that controls what MCP tools an agent can call, validates inputs, requires human approval for sensitive operations, and records every action as verifiable evidence.

Question 6

What are cryptographically signed audit logs?

Accepted Answer

AgentKey generates audit evidence that is cryptographically signed, meaning it cannot be tampered with after creation. Each audit record includes a digital signature that proves its authenticity. This evidence can be verified offline, without access to AgentKey's servers, making it suitable for compliance, incident response, and legal proceedings.

Question 7

Does AgentKey support human-in-the-loop approval?

Accepted Answer

Yes. AgentKey supports human-in-the-loop approval workflows where sensitive actions require manual sign-off before execution. You can define which actions need human approval, and AgentKey will pause the agent, notify the approver, and only execute the action after explicit approval.

Question 8

How much does AgentKey cost?

Accepted Answer

AgentKey offers a free tier for getting started. Paid plans scale based on agent usage and the number of protected actions. Visit the pricing page for current plan details and feature comparisons.

Question 9

Which AI platforms does AgentKey work with?

Accepted Answer

AgentKey is agent-agnostic. Any agent whose tool calls can be wrapped with the JavaScript or Python SDK, or whose MCP client can be pointed at the AgentKey MCP bridge, works with it. The agent's framework or model does not matter: AgentKey sits on the tool-call path, not inside the model.

Question 10

Can AgentKey audit evidence be used for compliance?

Accepted Answer

Yes. AgentKey's audit evidence is cryptographically signed, offline-verifiable, and can help meet audit evidence requirements. Every action routed through AgentKey is recorded with timestamps, agent identity, tool called, and outcome. The evidence is tamper-evident rather than tamper-proof: verification detects any alteration to the stored record, but it does not prove the signing keys were never compromised, and it does not cover actions taken outside AgentKey.