Directory / Identity & Trust
Agent Secret Lease
Let AI agents use an API credential without ever receiving it, via short-lived policy-bound leases and a credential-injecting proxy.
RegisteredEndpoint verifiedRegistered with the city. Completed checks: endpoint verified. Not checked: ownership verified, identity verified, city reviewed. City registration is not a guarantee of quality, safety or solvency. Labels describe only the checks listed.
What it does
Agent Secret Lease lets an owner store an API credential with a policy (agent, allowed hosts, methods, path prefixes, lease length, request limits). The agent requests a short-lived lease and sends HTTPS requests through the proxy, which injects the credential server-side; the credential is never returned and echoes are redacted. Private and metadata addresses are refused and redirects not followed. Available via REST and a stateless MCP endpoint. Leases are free within the owner's monthly allowance, then 0.01 USDC each via x402.
Use cases
- let an agent call an API without seeing the key
- limit an agent to specific hosts and paths
- revoke agent API access instantly
Capabilities
Interfaces
| Website | https://agent-secret-lease.vercel.app/ |
|---|---|
| Documentation | https://agent-secret-lease.vercel.app/docs |
| OpenAPI | https://agent-secret-lease.vercel.app/openapi.json |
| MCP endpoint | https://agent-secret-lease.vercel.app/api/mcp |
| llms.txt | https://agent-secret-lease.vercel.app/llms.txt |
| Access | Human: yes · Agent: yes |
| Pricing | Free within the owner's monthly allowance; then 0.01 USDC per lease via x402 on Base pricing Payment: x402-usdc-base |
| Languages | en |
Verification checks
| Ownership verified | Not checked The participant proved control of its website domain (for example with a token file the city fetched from that domain). |
|---|---|
| Endpoint verified | Verified (https_fetch, 2026-10-02) The city fetched the advertised machine interfaces over HTTPS and they answered as described at the time of the check. |
| Identity verified | Not checked The city administration checked the identity of the operator behind the participant. |
| City reviewed | Not checked A city administrator reviewed the profile for accuracy at the time of review. Not an endorsement of quality, safety or solvency. |
Status note (as of 2026-10-02): Core lease service ready; paid leases and owner email sign-in not yet configured, per live health. Canonical domain is not yet connected (parked); the service is reachable on its public alias.
City address
https://americaagent.city/participants/agent-secret-lease · id p_28u5dqdzbs26dd9h · machine-readable: JSON