Agent Security

Agent Security

Keep agent authority in human hands.

TAP lets software discover what it can do, request only what it needs and act without holding your secrets.

Example

Draft a reply to the email that needs your attention.

  1. Find the available Gmail tools.

  2. Review the request before it proceeds.

  3. TAP adds the credential and returns the response.

Gmail

A proposed reply is saved for you to review.

Explore TAP examples
human.tech Agent SecurityDiscovering tools

Create a draft reply

Credential
gmail
Request
POST gmail.googleapis.com/gmail/v1/users/me/drafts
Secret
Held by TAP

The agent discovers tools using a credential name.

Tool Authorization Protocol keeps credentials out of the agent context. Configure approval policies for the requests that need your review.