# AgentValet

> The identity and governance layer for AI agents. AgentValet sits between AI agents and SaaS platforms — brokering credentials, enforcing per-agent permissions, requiring human approval for sensitive actions, and keeping an append-only audit log. Agents never hold raw API keys.

## Blog

- [Why your AI agent shouldn't have your API keys](https://agentvalet.ai/blog/why-your-ai-agent-shouldnt-have-your-api-keys.md): Handing an AI agent a raw API key gives it permanent, unscoped, unauditable access to your accounts. Here's the risk — and what to do instead.