Skip to main content
Give each agent its own API key, limited to the cards and logins it needs. Creating a key takes about 2 minutes.
The API keys page listing two keys, Shopping agent and Claude Code on laptop, each with its masked prefix, Full access, and whether its agent has connected: Connected 12m ago and Waiting to connect.The API keys page listing two keys, Shopping agent and Claude Code on laptop, each with its masked prefix, Full access, and whether its agent has connected: Connected 12m ago and Waiting to connect.

The API keys page with two keys.

An API key is a secret starting av_ that your agent uses to connect. It is shown once, when you create it. Agent Vault keeps only a scrambled form of the secret that cannot be turned back into the key, plus its first 12 characters in readable form so you can tell your keys apart. See What is stored.

​
Create a key

1

Open API keys

In the sidebar, under Vault, click API keys, then click New key.
2

Enter a Name

Only you see the name. Name it after the agent, such as grocery-agent.
Names are limited to 200 characters (leading and trailing spaces are not counted). If the dialog shows Failed to create key, the name may be too long: shorten it and click Create key again. The error code is api_key_label_too_long.
3

Choose card access

Under Cards, keep All cards, or pick Only selected and tick cards.
4

Choose login access

Under Logins, keep All logins, or pick Only selected and tick logins.
5

Leave signups off

Under Signing up, leave Let this key create and change its own logins off unless this agent should open accounts for you. See Let a key create logins.
6

Choose verification

Under Verification, tick Fill a test card instead of my card only for a key that tests checkouts. See Fill a test card instead.
7

Click Create key

8

Copy the key

In the Copy your key now panel, click Copy and store the key safely. It is never shown again.
The New API key dialog with a Name field, Cards and Logins access each set to All or Only selected, and the signup checkbox turned off.The New API key dialog with a Name field, Cards and Logins access each set to All or Only selected, and the signup checkbox turned off.

The New API key dialog.

The Copy your key now panel showing the new key masked, with a Copy button and a pointer to the setup steps on the Overview.The Copy your key now panel showing the new key masked, with a Copy button and a pointer to the setup steps on the Overview.

The key is shown once, right after you create it.

To hand the key to your agent, open the setup steps on Overview. Until you reload or close the dashboard tab, those steps show this key filled in. When the agent first connects, its row shows Connected. Agent Vault also tries to notify you, if An agent connects for the first time is on in notification settings. That notification is best effort.
An API key works like a password. Anything holding it can act as your agent, within the key’s access and your agent card rules. Keep it out of code repositories and shared documents.

​
The keys list

The Agent column’s last-used time updates when the key fetches the token catalog, opens or resumes a browser session through the proxy, files a signup request, or changes a login’s password or username. A refused request does not update it. The time can lag by up to a minute.

​
Change a key’s access

1

Click Edit access on the key's row

The dialog shows the same Cards, Logins, Signing up and Verification settings as when you created the key.
2

Click Save access

The change applies on the agent’s next attempt. The key itself does not change.
Access follows each card or login record, not its name or number. A re-added card or login is a new record, so a key limited to the old one cannot use it. Tick it again under Edit access.

​
Let a key create logins

Let this key create and change its own logins is off by default. Turn it on only for an agent that should sign you up for new accounts. With it on, the agent can:
  • ask to create a login. The vault generates the password. Each request waits for your approval on Logins unless the site and email are on your Pre-approved signups list;
  • record the username a site assigned to a login it created;
  • change the password of a login it created.
The last two work only for this key, not another key on your account, and only for seven days after the login was created. Seven days is the default; your deployment can set a different window. They never work on a login you added yourself, or on one whose password you replaced. A key set to Only selected logins has each login it creates added to its list automatically. Once that list holds 50 or more logins, the next signup cannot be approved. Untick logins to bring the list under 50, or switch the key to All logins. The 50 cap applies only to logins the agent adds; logins you tick yourself under Edit access are not capped. Storing a two-factor secret does not need this setting. Any key allowed to use a login can store a two-factor secret for it during two-factor setup. It can never replace an existing secret. Agent Vault tries to notify you each time a secret is stored, but that alert is best effort. The 2FA chip on Logins is the reliable record.

​
Fill a test card instead

Fill a test card instead of my card is off by default. Tick it for a key that only checks that a site’s card fields work, such as a nightly test run, without buying anything. When this key’s agent fills a card number or security code (CVV), it gets a public Visa test card and a test code, never your card.
  • The test-card fills count against no spending limit.
  • Test-card fills never auto-pause an agent card and raise no card, limit or pause alert.
  • Everything else still applies: the key’s first use sends An agent connects for the first time, and an identity or address fill on a site you have not authorized still waits for a new-site approval.
  • Your real card is never used or charged.
  • The agent cannot tick or clear it. Only you can, under Edit access.
  • An agent using it cannot run an attested checkout.
The test card does not make a merchant refuse the order. The practice checkout and some payment sandboxes accept it and place the order. Let a test agent submit only on a checkout meant for testing.
The setting is read when the agent starts a session. A session already open keeps the old setting until the agent starts a new one. In the meantime:
  • if you just ticked it, the open session’s card fills are refused with scope_denied, so your real card is never reached;
  • if you just cleared it, the open session keeps filling the test card.
An agent can check the setting with browser.verificationOnly() before it fills. Each test-card fill also reports card_fields_verified: true in its fill report.

​
Revoke a key

Revoking is permanent. A revoked key cannot be turned back on: give the agent a new key instead.
1

Click Revoke on the key's row

2

Click Revoke key

The key stops working at once. It can no longer fetch tokens, and a browser session the agent already has open can no longer fill anything either. That open session is closed at the proxy’s next key check, within about a minute.
Revoked keys are hidden. Click Show revoked to see them, marked Revoked or Auto-revoked.

​
What happens when…

​
Connected apps

An agent connected through the hosted MCP server has no API key. Each sign-in becomes a connection instead. In the sidebar, under Vault, click Connected apps to see them. They are not listed on API keys. A connection appears the first time the app calls Agent Vault with your account after signing in. Each sign-in is its own connection, so one app can appear more than once. The name is the one the app registered with. It is shown as Connected app until you open Connected apps or Sessions after the app has connected. Two sign-ins from the same app share the name, and often the client id. Tell them apart by Connected and Last used.

​
Choose or change a connection’s access

1

Click Choose access on the connection's row

Once access has been chosen, the button reads Change access.
2

Set what this app may use

The What this app may use dialog has the same Cards and Logins settings as a key, plus Let this app create and change its own logins and Fill a test card instead of my card. They work as described above for keys.
3

Click Save access

The app’s next call uses it.
Until you save access the first time, the app cannot act for you at all. Its calls are refused with access_not_chosen. Whatever you choose here, Agent Vault still asks you before a purchase at or above the agent card’s Require confirmation above amount.

​
Revoke a connection

Revoking a connection is permanent. To use the app again, sign in again, which creates a new connection. Revoking in the app itself, or in your sign-in settings, does not end the access the connection already has: revoke it here.
1

Click Revoke on the connection's row

2

Click Revoke connection

The connection stops working at once. A browser session it already has open closes within about a minute.
Agent Vault tries to notify you (best effort), as for a revoked key, while An API key is revoked is on. A connection that is not used by its Revoked if unused by date is revoked automatically and shows Revoked: unused. By default that date is 31 days after the last use. Revoked connections are hidden. Click Show revoked to see them. An account can hold 200 connections in total. Revoked connections, including ones marked Revoked: unused, still count, so revoking does not free a place. At 200, the first call after a new sign-in is refused with too_many_connections, while the connections you already have keep working. To clear old connections, contact team@self.xyz. See Limits. Each connection can hold at most 50 live credentials at once (roughly, 50 open sessions). If the app is refused with too_many_credentials, close finished sessions, or wait the number of seconds the message gives (at most 75 minutes). See Limits for how credentials are counted.

​
For developers

Next: Overview to connect your agent with its new key.