Droids work while you’re not watching. Decide what they can touch before they start.

A droid can comment on pull requests, update Jira and post in Slack with nobody looking. With AgentValet each of those calls is checked against the droid’s grant and written to the audit log, and one click stops every platform it could reach.

Livelast reviewed 24 September 2026

One command writes the Droid config

You need Node.js 18 or later and Factory Droid installed.

  1. In your project directory, run the register command. Add --project to scaffold a governance droid into this repo instead.

    Terminal
    npx @agentvalet/register

  2. Your browser opens. Sign in, or create a free account, and the CLI finishes registering when you authorise it. You don’t copy any ids on this path.

  3. Restart Factory Droid and check its MCP settings for agentvalet. If you used --project, run /av-status inside Droid.

  4. In the dashboard, approve the new agent and grant the platforms it needs. It starts with nothing: every call is refused until you grant it.

Scaffold the governance droid into this repo

With --project, the CLI writes project-scoped config and droid files you can commit, instead of the user-wide entry.

  1. Run the register command with --project.

    Terminal
    npx @agentvalet/register --project

  2. It writes .factory/mcp.json (added to your .gitignore if you have one, because it points at the key), .factory/droids/agentvalet.yaml, and the /av-status and /av-register commands in .factory/commands/. It can also add an optional reliability droid that watches the others.

What’s governed here

Nothing is allowed until you grant it. This is a typical first grant for Factory Droid; you decide every row, and you can change it without touching the agent.

Example grant for Factory Droid. Platforms and actions are illustrative.
What the agent triesPlatformDecision
Read and comment on an issueJiraAllowed within grant
Open a pull requestGitHubAllowed within grant
Post in #releasesSlackAsks you
Change organisation settingsGitHubNot granted

Factory Droid guide in the docsThe longer walkthrough, kept with the product docs.

All integrations or the platforms your agents can reach

Put Factory Droid behind AgentValet.

Register the agent, grant only what it needs, and approve the risky calls from your phone. Free to start, no credit card.

Protect my first agentWatch your agent’s calls live, no signup