Auth Your Agent: open-source MCP vault lets AI agents log in without ever seeing your password
kjames2001 · reddit · 2026-10-01
Developer kjames2001 open-sourced Auth Your Agent, tackling the personal agent identity gap: today you either hand over passwords and cookies or babysit every login. While Okta and Microsoft build corporate "agent identity," nobody serves one person with one agent and one phone. The rule: the agent never sees your password, and anything state-changing waits for your thumb.
- Path 1 (integrated sites): a "sign in with your agent" button where the agent proves itself with DPoP-bound short-lived tokens; you approve on your phone via passkey.
- Path 2 (any site): a sandboxed browser vault in Docker exposed through an MCP server (navigate, click, typetext, checkloginwall, requesttakeover, requestapproval, endsession). At login walls, requesttakeover streams a live view to your phone so you sign in yourself; data-sending clicks are held until you tap Approve or Deny; endsession logs out everywhere and destroys the profile.
One shared bug: pressing Deny still let the GitHub star through because the vault released its hold before the abort settled — fixed in 0.3.6 with a regression test.
Plot twist: the post itself was written by the author's agent "Jarvis" through the same MCP tools, with the password never leaving the author.
More from coding & agent
- Firecrawl launches People Enrichment Pack so agents can find buyers, talent and company data — devdigest · 2026-10-02
- Stanford launches CS 224V, an Agentic AI course tackling agent reliability with RAG and formal methods — stanfordnlp · 2026-10-02
- Early Hands-On: OpenAI's Dots Agent Impresses With Speed and First-Try Accuracy — billyjhowell · 2026-10-02
- MINTEval, accepted at NeurIPS, shows LLM agents fail at tracking evolving contexts — EliasEskin · 2026-10-02
- Claude Code lead on the sassy status dot: it might just be busy with something else — cyrus_zei · 2026-10-02
- LlamaIndex Launches Extract v2.5, Beats Claude and GPT at 30%-4x Lower Cost — llama_index · 2026-10-02