Setup

One command. The CLI scaffolds the whole droid.

The AgentValet CLI signs you in via your browser, generates an RS256 keypair, registers your Droid as an agent, and writes ~/.factory/mcp.json (user-scoped, every project on this machine). No copy-paste, no IDs.

terminal
# In your project directory
npx @agentvalet/register

# Browser opens. Sign in. Done.
# The CLI writes:
#   ~/.factory/mcp.json                 - MCP entry, user-scoped
#   CLAUDE.md                           - governance instructions

# With --project, it scaffolds the whole droid instead:
#   .factory/mcp.json                   - MCP entry, project-scoped
#   .factory/droids/agentvalet.yaml     - governance droid
#   .factory/commands/av-status.md      - /av-status slash command
#   .factory/commands/av-register.md    - /av-register slash command
1
Run npx @agentvalet/register in your project directory.
2
Your browser opens to AgentValet. Sign in (or sign up, it's free). The CLI auto-completes registration when you authorize.
3
Restart Factory Droid and check its MCP settings for agentvalet (or run /av-status if you set up with --project), then approve platforms in the AgentValet dashboard. Droid agents can now call GitHub, Jira, Slack, and more, all scoped and logged.

Full walkthrough in the docs →

Project-scoped install: want the governance droid spec and the /av-status, /av-register slash commands scaffolded into this repo instead of a global config? Run npx @agentvalet/register --project.
Prefer to wire it up by hand?

The CLI is the recommended path. If you'd rather edit the config yourself, here's the equivalent .factory/mcp.json:

.factory/mcp.json
{
  "mcpServers": {
    "agentvalet": {
      "command": "npx",
      "args": ["-y", "@agentvalet/register", "mcp-server"]
    }
  }
}
What changes

Engineering agents with governed platform access

Factory Droid engineering agents can access GitHub, Jira, Slack, and other platforms without credentials stored in project config.

No credentials in config
Droid project configs contain no API keys or tokens. Credentials live in AgentValet's encrypted vault, hardware-backed key on paid plans, decrypted only at call time.
Per-platform scoping
Droid gets GitHub repo access but not org admin. Jira read but not delete. Scopes are enforced at the proxy, not just declared.
Full call-level audit
Every GitHub PR comment, Jira ticket update, or Slack message logged with agent ID, timestamp, and outcome.
Instant revocation
Suspend a Droid agent or remove a platform in one click. No need to rotate keys across every project config.

Ship governed Droid in under 5 minutes.

One command. The browser does the rest. Free to start, no credit card.