Secret Sauce

Let your agents sign in, without ever seeing the password.

Secret Sauce is a consent-based vault for people and AI agents. A person approves one specific action, a trusted executor carries it out, and the agent only learns whether it worked.

Currently in a private pilot.

How it works


An agent asks
It names a person and a site. It never receives a password, a one-time code or a page.
The person decides
They get a private link, read exactly who it is for and what is shared, and allow it once or decline.
A locked-down browser does it
The credential goes straight from the vault into the site. The agent gets back a status, nothing more.

Designed around a few firm rules


Use without reveal
Values stay out of prompts, logs, screenshots and traces. Redaction alone is never the boundary.
Consent you can read
Approval is bound to the exact request. Change the recipient, the fields or the wording and the old approval stops working.
Saving is its own choice
Remembering a detail never lets anyone use it. People can delete what they saved, or withdraw, at any time.
Deleting means deleting
Each person gets their own encryption key, so destroying it makes their stored data unreadable.

For teams that run agents


A small HTTP API with a key per agent, retry-safe executions, and results reduced to a status. Your organization will connect its own text-message, key-management and browser providers from the operator console.

Hammer Labs