News

PassControl: Protecting API Keys for AI Agents

PassControl has launched—a gateway that uses Ed25519 passports to securely manage AI agent credentials without transferring actual keys.

Compiled by Sergey KostenchukPublished 2026-07-29Updated 2026-07-29

2026-07-29 Coding OpenAI

Expanded analysis for this story

Open the longform version with context, source trail, and what changed.

Read longform

Show HN: PassControl – so your AI agents never hold your real API keys Source

🔐 PassControl: Protecting API Keys for AI Agents

PassControl has been released—a gateway that prevents the direct transfer of real API keys (OpenAI, Anthropic, etc.) into agent execution environments. The system uses Ed25519 passports to securely exchange key signatures at the moment of the request.

🌍 This creates a Zero Trust architecture, preventing uncontrolled costs in the event of agent compromise.

👤 It allows for the secure use of agents in Claude Desktop or Cursor via MCP, controlling budgets at the gateway level.

Source 1: https://passcontrol.vertias.eu

Sources

passcontrol.vertias.eu