Integration

Authorization for autonomous agents

Give a long-running autonomous agent a leash: a warrant that caps spend, expires, and can be revoked the instant something looks wrong.

Why authorize Autonomous agents tools?

Autonomous agents run unattended, sometimes for hours, chaining actions no human reviews in real time. The failure mode is a runaway loop that spends, sends, or deletes far beyond intent. A warrant is the leash: a cumulative spend limit, a rate limit, an expiry, and one-call revocation that cascades to everything the agent delegated.

Bound the agent

import { issue, attenuate } from 'liceat';

// Issue a scoped root warrant for an agent…
const { warrant, attenuationKey } = issue(issuerSecret, 'kid-1', {
  principal: 'org:acme', agent: 'agent:assistant',
  caveats: [
    { type: 'resource', patterns: ['mcp:github/*'] },
    { type: 'action', actions: ['read'] },
    { type: 'spend_limit', currency: 'USD', max: 5000 },
    { type: 'expires', at: Math.floor(Date.now()/1e3) + 3600 },
  ],
});
// …then hand a NARROWER one to a sub-agent — authority can only shrink:
const sub = attenuate(warrant, attenuationKey, [{ type: 'action', actions: [] }]);

What you get

• Least privilege — each agent gets a warrant scoped to exactly the tools, resources, and spend it needs.
• Provable afterward — every allow/deny is recorded in a tamper-evident log you can audit or hand to a compliance reviewer.
• Instant revocation — kill a compromised agent's authority immediately, and it cascades to every sub-agent it delegated to.
• No new keys to leak — the agent never holds your API keys, only a narrow, expiring warrant.

Frequently asked

What is Liceat?

Liceat is permission infrastructure for AI agents. You issue a warrant — a scoped, spend-capped, revocable token — that grants an agent narrow authority; the agent presents it at the point of action; Liceat enforces it (scope, spend, rate, holder-binding, revocation) and records every decision in a tamper-evident log. It is open source with a zero-dependency SDK for TypeScript and Python.

Is it free?

The SDK and self-hosted gateway are free and open source. The hosted gateway at liceat.com gives 10,000 free decisions with no card, then meters at fractions of a cent per decision — payable by card or USDC.