Agent Lane

Infisical

Open-source platform for managing secrets, certificates and privileged access, including scoped credentials for AI agents.

Agent Vault

Infisical's open-source credential broker that proxies API calls for AI agents so they never hold secrets themselves.

Phase

An open-source secrets manager that syncs API keys and environment variables to apps, CI and agents with end-to-end encryption and access control. Free tier, Pro from $10 per user a month, or self-host.

Wren Pre-sign Check

Wren Pre-sign Check is a pay-per-call x402 API that an AI agent calls before it signs anything with its wallet. Send a transaction (to + data), an EIP-712 typed-data payload or untrusted text, and it returns block, review or allow, the decoded call in plain words and every finding: unlimited approvals, Permit and Permit2 signatures, setApprovalForAll, EIP-7702 delegation, contract deployment and injected instructions. With an optional wren-guard policy (allowlist, spenders, caps) it also blocks unknown recipients, over-cap amounts and lookalike addresses. It is a static check and stores nothing you send; free demos show real output.

0.security

0 is an open, self-improving AI operating system for offensive security work. Its agents investigate code and binaries for vulnerabilities, test defenses, verify findings with working proofs and help fix the issues, and the team behind it publishes the advisories it has found in real open-source projects.

1Password for Agents

1Password for Agents lets personal AI agents sign in to your accounts without ever seeing your passwords or one-time codes. When a supported agent reaches a sign-in page, it asks for a credential from your vault; you approve the request, and 1Password fills it straight into the site, so the secret never enters the model or its memory. You can see and manage which agents have access to what. It launched with integrations for agents such as Claude Duet, ChatGPT Work and dots, Meta's Muse and Grok Bot, and needs a 1Password plan.