A Paperclip company runs many agents at once. Give each one its own limits.

Paperclip spins up whole companies of autonomous agents. The AgentValet adapter routes their platform calls through the broker, so each agent has its own grant, risky calls wait for a person, and the audit log shows which agent did what.

Betalast reviewed 24 September 2026Tell Edwin what you hit

Install the adapter, set three variables

You need Node.js 20 or later and a Paperclip instance you can rebuild. Signing in is per company; what each agent may do is set per agent.

1
Install the adapter in your Paperclip instance, register it in the server, UI and CLI adapter registries, then rebuild. The server one looks like this.
server/src/adapters/registry.ts
```
import * as agentValet from "@agentvalet/paperclip-adapter";
import { execute, testEnvironment } from "@agentvalet/paperclip-adapter/server";

registry.set("agentvalet", { ...agentValet, execute, testEnvironment });
```
In the dashboard, open Settings, Integrations, Paperclip and click Generate keypair. Copy the private key: it’s shown once.

Set three variables on the Paperclip server. Your owner id is under Settings, Account.

Paperclip server environment

AGENTVALET_PROXY_URL=https://api.agentvalet.ai
AGENTVALET_OWNER_ID=<owner-id>
AGENTVALET_COMPANY_KEY=<the private key from step 2>

Create agents with the agentvalet adapter type. On first run each one waits for you to approve it.

Agent config

{
  "adapterType": "agentvalet",
  "adapterConfig": {
    "underlyingAdapter": "claude_local",
    "underlyingAdapterConfig": { "cwd": "/projects/my-agent" },
    "approvalTimeoutSec": 60
  }
}

Grant each agent its platforms in the dashboard.

Bring your own company key

If you’d rather the private key never passes through the dashboard, generate the pair yourself and register only the public half.

Generate the pair.

Terminal

openssl genpkey -algorithm RSA -pkeyopt rsa_keygen_bits:2048 -out agentvalet-company.key
openssl rsa -in agentvalet-company.key -pubout -out agentvalet-company.pub

Paste agentvalet-company.pub under Settings, Integrations, Paperclip, Register your own key, and set AGENTVALET_COMPANY_KEY to the contents of agentvalet-company.key. If your environment mangles newlines, set AGENTVALET_COMPANY_KEY_B64 to the base64 of it instead.

What’s governed here

Nothing is allowed until you grant it. This is a typical first grant for Paperclip; you decide every row, and you can change it without touching the agent.

Example grant for Paperclip. Platforms and actions are illustrative.
What the agent tries	Platform	Decision
Read a base	Airtable	Allowed within grant
Post an update	Slack	Allowed within grant
Create an invoice	Xero	Asks you
Delete a file	Google Drive	Not granted

AgentValet docsThe longer walkthrough, kept with the product docs.

All integrations or the platforms your agents can reach

Put Paperclip behind AgentValet.

Register the agent, grant only what it needs, and approve the risky calls from your phone. Free to start, no credit card.

Protect my first agent Watch your agent’s calls live, no signup