Your systems, safely in agents’ hands
Connect, Act, product 4 of 8
The problem. To act, agents need your booking, order or account systems. Handing them API keys or a customer’s password lets them do anything, and tools that change silently can be turned against you.
What changes. Upload your API description or connect your platform. Each operation becomes a governed tool for every agent protocol, your policy decides what it may do, and agent tokens never reach your systems.
Working in lab runs end to end in our lab todayIn lab on our build plan: designed, being built or tested in our lab; not available yetWhat works today
From an API file to governed tools
TrueSession proposes what each operation is, from read to never. You confirm every one, try it on the test bench and publish. Anything unclassified stays closed, and a change to any tool shows a diff and waits for your approval.
Everything in Connect
Each feature with its status today.
- Connectors that can never charge, pay, approve or confirm an order by themselvesWorking in lab
- Credentials kept as references, never shown to agentsWorking in lab
- Upload an OpenAPI file: each operation becomes read, hold, book, buy, change or neverIn lab
- Governed tools published to MCP, A2A, UCP and ACP at onceIn lab
- Signed tool lists: any change shows a diff and waits for your approvalIn lab
- Agent tokens never reach your systems; each call gets its own short-lived tokenIn lab
- A test bench that shows what an agent can call and what your policy refusesIn lab
- Shopify, booking and banking connectors with pilot partnersIn lab
Questions about Connect
Can agents use our own systems and APIs safely?
That is what Connect is for. You upload your API description or connect your platform, confirm what each operation may do, and agents get governed tools. Connectors can never charge, pay or confirm an order on their own today; compiling tools from your API file is in the lab.
How is TrueSession different from bot management or an MCP gateway?
Bot management decides which traffic reaches your site. MCP gateways turn APIs into tools for a company’s own agents. TrueSession is for other people’s agents acting for your customers: it adds your policy per action, the customer’s delegation and exact approval, payment confirmation, signed answers, conversations and proof, across every agent protocol, and it works with the CDN you already have.
Help shape the first agent gateways
We are designing pilots with merchants, marketplaces and banks.