tyler-r-kendrick/opensesame
Developer tools이 페이지는 AI로 자동 번역되었습니다. 기술적인 세부 사항은 원문을 확인하세요. 원문 보기
An all-in-one authorization fabric for the agentic era.
개요
Agents get scoped, revocable authority to act — never the secrets behind it. People keep their own credentials on their own devices. Websites get "Sign in with OpenSesame" without running a backend. Pre-release / early stage. APIs and behavior may change. An agent that needs to call GitHub, a database or a payment API normally gets handed a token, and from then on it has that token. OpenSesame inverts that. The agent holds a — a handle that names a connection but contains nothing secret — and states an . The Host authorizes the intent against policy and grants, performs the call itself, and returns a signed . There is no getSecret() anywhere in the agent-facing API, so there is nothing for a prompt injection to exfiltrate (ADR 0005). - The Identity API answers who; the Host API answers what they may do and does it. They are never merged behind one backend (ADR 0017).
README
원문 README의 일부입니다. 원문 보기.
OpenSesame
An authorization fabric for the agentic era. Agents get scoped, revocable authority to act — never the secrets behind it. People keep their own credentials on their own devices. Websites get “Sign in with OpenSesame” without running a backend.
Live app · Documentation · Getting started · Architecture · Decisions · Security
Status: Pre-release / early stage. APIs and behavior may change.
Project information
- Homepage: opensesame-labs.github.io/OpenSesame
- Install / getting started: docs/getting-started
- Configuration: docs/getting-started — environment variables follow
.env.schema - How to contribute: CONTRIBUTING.md
- Report a bug: GitHub Issues
- Report a vulnerability: SECURITY.md · open a private advisory
- Changelog: CHANGELOG.md
- License: MIT — LICENSE
The idea in one paragraph
An agent that needs to call GitHub, a database or a payment API normally gets
handed a token, and from then on it has that token. OpenSesame inverts that.
The agent holds a ConnectionRef — a handle that names a connection but
contains nothing secret — and states an intent. The Host authorizes the
intent against policy and grants, performs the call itself, and returns a
signed receipt. There is no getSecret() anywhere in the agent-facing API,
so there is nothing for a prompt injection to exfiltrate
(ADR 0005).
What it does
| For | OpenSesame provides |
|---|---|
| Agents | ConnectionRef + intent → authorize → invoke → receipt. Task-scoped grants that can only narrow, JIT access with approval, MCP servers and WebMCP tools, CLI credential helpers for git, Docker, AWS and kubectl. |
| Operators | An authority console: connectors, grants, approvals, device login, certificates (private CA, ACME), rotation, security alerting, audit receipts. |
추천 도구
다른 키워드를 입력하거나 필터를 제거해 보세요.
설치
npx skillfish add tyler-r-kendrick/opensesame