sigil

Double-click anywhere. I know everything about Sigil.

or I can help you find anything

Ask about Sigil — or anything in the ecosystem

Enter to askEsc to close
Arsenal · agent capability tokens · scoped credentials

Arsenal. Scoped credentials for agents.

Arsenal issues Agent Capability Tokens (ACTs) — short-lived, narrowly-scoped credentials that let agents call any HTTP API without ever holding the underlying secret. 11-step credential proxy with SSRF guard, DNS rebinding protection, human-in-the-loop consent, and hash-chained audit logging.

Aegis verificationFor builders →
sigil · liverunning
ARSENAL · agent capability tokens · credential vaultidleKEY CARDSCARD 01GitHub PATSCOPEread:repo · 30dCARD 02AWS IAMSCOPEs3:Get · 1hCARD 03OpenAI APISCOPEgpt-4o · 5K tokensCARD 04Stripe RestrictedSCOPEcharges:create · 24hCARD 05Anthropic APISCOPEclaude-opus · 10K tokensCARD 06Figma PATSCOPEfiles:read · 7d11-step credential proxy · SSRF guard · hash-chained audit · scoped tokens only

Never hand an agent a long-lived secret again.

Scoped tokens · short TTLs · audit trail · revocable instantly.

AegisIdentity →