SecretAgent

SecretAgent is a secrets management tool for crypto-native AI agents.

• Projects can use pay-as-you-go LLM API keys (owned by us) or bring their own
• Centralized secret management with integrated access logs and fleet monitoring
• Secrets are inserted by a proxy so agent never has direct access
• Supports any API, not just LLMs (placeholder keys are replaced by the proxy)
• Agent auth and payments powered by crypto wallets
• Central project wallet enables agents to pay for their own LLM access!
• Enables instant config updates without code changes or redeploying

How it works

Users authenticate with their own wallet, and create one or more projects. Each project gets its own Privy server wallet which will pay for all usage.

Each project can contain multiple config items. These can be three different types:

• LLM - pay-as-you-go access to LLM APIs. Enables dynamic switching of provider, model, and model settings without redeployment
• Proxy - bring-your-own API key for any API (not just LLMs). Each key has a value and a domain matching pattern(s).
• Static - config that can be fetched directly by an agent. Useful for non-sensitive config or situations where simple proxying may not work.

Each project has a list of allowed agents, identified by their wallet address. Authentication between the agent and API uses signed messages by the agent wallet. Admins can manage this list and immediately revoke access from a rogue agent!

Our JS SDK is extremely easy to use. It needs only the project ID, agent wallet address, and a wallet signing method. Everything else happens transparently, as the proxy behaviour happens at the HTTP layer. This means users do not need to adjust their LLM or other API integrations at all.

The core project has 3 parts:

• SecretAgent.sh web app - management console for agent config and monitoring
• secretagent.sh npm module - client library to integrate with agent code
• SecretAgent API - API that powers the web app and the client library proxy

Additionally, we have example repos showing how the tool can be used with various agent toolkits.

SecretAgent is powered by:

• CDP - Onchainkit, Agentkit - Used CDP heavily for wallet connect / login, integrated onramp/funding, balances, and our example agent is based on AgentKit. Also used coinbase API for checking current eth price.
• Base - L2 provider for payments - We chose Base as the L2 to handle payments for our platform. Integrated onramp to pay for your project uses Base and is integrated with CDP. We wanted this app to be approachable for general devs (not just crypto folks) so Base and deep Coinbase integration was a natural fit.
• Privy - Server wallets with policies - Each project provisions a new Privy server wallet to fund all activity. This wallet has an attached policy to make sure funds can only be used to pay for our service.
• Autonome - Example Agent deployment - Additionally, we built into our website UI the ability to chat with an Autonome-hosted agent.
• Infura - checking current balances

Non-crypto tools

• DMNO - Secrets management
• Next.js - Web app
• TailwindCSS - Styling
• Hono - API framework
• Drizzle - Database / ORM
• Cloudflare Workers - API hosting

The agent SDK does some patching of global nodejs fetch and https methods, so that it will intercept all requests without users needing to adjust how they call various APIs. This is tricky to get right, but it means the tool is much easier to integrate and much more flexible!