← Blog

Stop playing secret manager for your agents

Your agent finished the code an hour ago. The PR is clean, the tests pass, and it is sitting there, waiting for a human to create an OAuth app, move a webhook secret, and fix a callback URL in a provider console. You did not hire a coding agent to become its secret manager. But that is the job the current stack hands you. Every integration a product adds makes this worse. GitHub apps, Slack scopes, Linear webhooks, Supabase keys, and deploy targets each add another console, credential, and place where a branch can diverge from shared staging. The agent can write the feature. It cannot mint the world the feature needs. So it blocks, and the block lands on you.

The bottleneck is not the model. It is the environment.

Policy up front, consumption on demand

The answer is not to hand agents your credentials. It is to separate policy from consumption. Humans declare the integration contract once: default manifests for each provider, scoped API keys, spend limits, and custody rules. Agents consume that policy during a run: mint an environment for the branch, pull its environment file, and keep working. No pasted secret and no waiting for somebody to visit five consoles. Bounded delegation is what makes this safe. A key can be limited to preview mints for one app. Credits cap what automation may create. Ordered steps, workflow references, and checkpoints show what Instaship changed on your behalf. You can audit the result precisely because you did not have to stay in the loop.

Real, isolated, disposable

These are real provider apps with real OAuth and real webhooks, isolated for the branch and removed when the branch is done. Mocks hide provider behavior and shared staging drifts. An environment that matches the branch contract does neither. When you are ready to operate everything directly, Instaship returns the workspace credential bundle once and permanently stops reconnecting those accounts. Custody belonged to your team throughout. We are building this with teams that delegate heavily to agents. Start with ten free mints each month, with no card and no meeting required.