Engineering
8 min read
Who is calling? Designing identity for agents
API keys tell you which account. Agent identity tells you which agent, who built it and who is responsible for it.
Tomás Okafor
When a person signs up, you get an email address and a password. When an agent signs up, you need something better: a verifiable record of who built it and who owns it.
Scoped by default
Every key Opero issues is scoped to one agent, one product and a set of actions. Spend limits and rate limits travel with the key, not the account.
Receipts for everything
Each call returns a signed receipt, so owners can audit exactly what their agents did and you can prove exactly what you served.