AI agents · secured by FerrisKey
Let AI agents investigate.Keep the keys to production.
Agents can read your telemetry, summarise an incident and suggest a fix. Each one gets its own scoped token from FerrisKey that expires, and whatever it does goes in the audit log.
triage-agentyour AI agent
FerrisKeyissues a scoped token
FerrisTracechecks every call
What the agent tries
- Read the traces of checkout for the last hourallowed · logged in audit
- Post a root-cause summary on INC-482allowed · logged in audit
- Mark INC-482 as resolveddenied · needs incidents:resolve
- Delete the project checkoutdenied · never grantable to an agent
Tick and untick the scopes and watch which of the agent's actions go through.
Access you can explain to security.
How agents usually get access, and how it works with FerrisKey.
Today
3 steps · 3 tools- 1admin UIcreate an API token with full rights
- 2.envpaste it into the agent config
- 3memoryremember to revoke it someday
With FerrisTrace
2 steps · 2 tools- 1FerrisKeyregister the agent, pick its scopes
- 2FerrisTracethe agent signs in with a short-lived token
Each agent signs in as itself and can only do what you ticked.
Guardrails included.
- One identity per agentAgents sign in over OpenID Connect through FerrisKey, the same way your team does.
- Scoped permissionsScopes are set per agent and per project. Admin scopes can never be granted to an agent.
- Short-lived tokensTokens expire and renew on their own, and you can revoke an agent with one click.
- Audit logEach read and write is recorded with the agent and the token that allowed it.
- Query APIAgents read traces, logs and metrics through the same API as your scripts.
- Incident commentsAgents post what they found on the incident, and a human decides what to do with it.
The rest of FerrisTrace.
- Traces, logs & metricsFollow one request from the click to the database.Learn more
- InfrastructureYour Kubernetes cluster, next to the services it runs.Learn more
- Incident responseFrom the first alert to the postmortem, on one timeline.Learn more
- AI observabilityWhat each LLM call cost, and how long it took.Learn more
Give your agents a job, not your passwords.
Register an agent in FerrisKey and let it take the first look at your next incident.