The problem

Paperclip alone vs. Paperclip + AgentValet

Paperclip alone
Credentials duplicated across agent config files. No per-call audit trail, you see outcomes, not actions. The kill switch is slow: revoking a leaked key touches every config. All agents share the same permissions, so one compromised agent exposes all.
Paperclip + AgentValet
One credential, zero exposure, decrypted in-memory at call time only. A per-agent permission matrix with scope attenuation. Human-in-the-loop approval for high-stakes or financial calls. A full audit trail per agent, per platform, per call.
Comparison

What changes when you add AgentValet

Credential storage
Paperclip alone: config files / env vars per agent. With AgentValet: HSM-encrypted vault, decrypted at call time.
Per-agent permissions
Paperclip alone: shared credentials, same access for all. With AgentValet: scoped permission matrix per agent per platform.
Audit trail
Paperclip alone: none, outcomes only. With AgentValet: append-only log of agent, platform, action, timestamp.
High-stakes calls
Paperclip alone: execute immediately. With AgentValet: human-in-the-loop approval gate.
Revocation
Paperclip alone: update every config file manually. With AgentValet: one click in the dashboard, instant cascade.
Anomaly detection
Paperclip alone: none. With AgentValet: circuit breaker, 3 auth failures auto-suspend the agent.
Setup

How to connect AgentValet to Paperclip

Install the adapter, set three environment variables, and your Paperclip agents register themselves automatically on first run.

terminal
# 1. Install the adapter
npm install @agentvalet/paperclip-adapter

# 2. Set environment variables
AGENTVALET_PROXY_URL=https://api.agentvalet.ai
AGENTVALET_OWNER_ID=your-owner-id
AGENTVALET_COMPANY_KEY=your-rs256-key
1
Run npx @agentvalet/register in your Paperclip project directory. This generates an RS256 keypair and records your company in the AgentValet registry. You'll receive your OWNER_ID.
2
Install @agentvalet/paperclip-adapter and set the three environment variables above. The adapter wraps Paperclip's outbound calls and routes them through the AgentValet proxy.
3
Connect platforms in the AgentValet dashboard, GitHub, Slack, HubSpot, Airtable, and more (20 platforms live, 5 more in testing). Each platform gets a scoped permission matrix you set per agent role.
4
Paperclip agents now call platforms through AgentValet. No credentials in config files. Every call is logged and any agent can be suspended instantly from the dashboard.

Connect AgentValet to Paperclip

Get cryptographic governance for your entire agent company in minutes.