Give scripts and CI pipelines access with agents

Agents read only the vaults you share with them and decrypt on their own machine.

Steps

1. 1

   In the Admin console, open Agents and create an agent for the script or pipeline.

2. 2

   Copy the one-time agent token and store it as a secret in your CI system.

3. 3

   Share the vaults the agent needs with it, as you would with a person.

4. 4

   Run the passkey-x agent command with the token. It downloads ciphertext and decrypts it on that machine only.

5. 5

   Stop the agent to end its access at once. Every read appears in the audit log.