MyApi: Secure API Gateway for AI Agents
Quick Summary
- Secure AI agent API access.
- Encrypts credentials, uses scoped tokens.
- Monitors and limits agent actions.
- Free during Founding Builder Beta.
MyApi functions as a personal API gateway specifically designed for AI agents. It intelligently positions itself between your AI agents and your various online accounts, meticulously managing and securing access to connected services. This digital portal ensures that your AI agents only perform actions they are explicitly authorized to do, enhancing overall system integrity. MyApi achieves this by encrypting your sensitive credentials with AES-256-GCM and storing them safely within a secure vault, preventing any direct exposure to your agents. Every interaction initiated by an agent is thoroughly monitored, subjected to defined rate limits, and recorded in a detailed audit log for complete transparency and control.
- 📋 What You Need to Connect Your AI Agents
- 📍 Accessing Your MyApi Management Dashboard
- ⭐ Empowering AI Agents with Secure Access Controls
- ⚠️ Resolving Access Challenges with MyApi
- 🔒 Fortifying AI Interactions: MyApi's Data Protection Measures
- 🎧 Official Help Desk Contacts
- ❓ Quick Answers for MyApi Users
What You Need to Connect Your AI Agents
- An active MyApi account (currently available for free during its Founding Builder Beta program).
- Access to the MyApi dashboard to seamlessly connect services and manage access tokens.
- AI agents that can accept and utilize a bearer token or communicate using MCP (Machine Coded Protocols).
- For advanced authentication, agents capable of supporting Agent Signing Credentials can leverage an Ed25519 key pair.
- An authenticator app to provide a 6-digit code for two-factor authentication during your login process.
Accessing Your MyApi Management Dashboard
- Navigate to the designated login page for your MyApi account.
- Enter your registered login credentials, typically your username or email address and your password.
- Input the 6-digit code generated by your authenticator app to successfully complete the sign-in procedure.
Empowering AI Agents with Secure Access Controls
- Personal API Gateway: MyApi acts as a secure intermediary, controlling access for your AI agents to over 227 supported services.
- Secure Credential Vault: Your actual service credentials are encrypted using AES-256-GCM and stored in a highly secure vault, ensuring they are never directly exposed to your agents.
- Scoped Tokens: AI agents receive precisely limited, purpose-specific scoped tokens, granting them only the minimum necessary permissions to perform their tasks.
- Real-time Monitoring & Rate Limiting: Track every API call made by your agents, set custom rate limits, receive alerts for unusual activity, and instantly pause or revoke agent access from your dashboard.
- Comprehensive Audit Logs: Every API action performed by an agent is automatically logged with detailed attribution, providing a clear and traceable record.
- Intuitive Workspace Management: Organize your services, tokens, AI personas, and audit histories into distinct workspaces, facilitating efficient team collaboration with role-based permissions.
- Data Portability: Easily snapshot and restore your AI personas, skills, knowledge bases, and memory, allowing for flexible movement and management across different workspaces.
- Broad Compatibility: MyApi seamlessly integrates with various AI frameworks, including Claude Code, Claude Desktop, Cursor, OpenClaw, Hermes, and any custom agent that supports a bearer token or MCP.
- Agent Signing Credentials: Offers an advanced authentication option for agents using Ed25519 key pairs for enhanced security protocols.
- Open Beta Program: Enjoy full access to all features during the current Founding Builder Beta, free of charge and without requiring a credit card.
Resolving Access Challenges with MyApi
⚠️ Unable to log in due to a forgotten password.
Cause: The user cannot recall their registered account password.
Solution: On the login page, look for a 'Forgot Password' or 'Reset Password' link. Click this link and follow the prompts, typically by entering your registered email address to receive instructions for setting a new password.
⚠️ AI agent cannot access a connected service or experiences restricted functionality.
Cause: The agent's scoped token has incorrect or insufficient permissions, or the token may have been revoked or paused.
Solution: Access your MyApi dashboard and navigate to Access Tokens. Verify the agent's token scopes to ensure it possesses the required permissions for its intended actions. Check if the token has been inadvertently revoked or paused and reactivate it if necessary. Additionally, review the audit logs for any specific error messages or access denials that can provide further insight.
⚠️ The authenticator app code is not accepted during login, or a code cannot be generated.
Cause: Possible time synchronization issues between your authenticator app and the server, or the authenticator app setup requires reconfiguration.
Solution: First, ensure your device's time settings are automatically synchronized to prevent time-based code errors. If the problem persists, you may need to re-link your authenticator app with your MyApi account through the platform's account settings, which might involve using a recovery code or an alternative verification method.
Fortifying AI Interactions: MyApi's Data Protection Measures
- 🔒 Utilize Strong, Unique Passwords: Create robust and distinct passwords for your MyApi account, incorporating a mix of uppercase and lowercase letters, numbers, and special characters.
- 🔒 Maintain Multi-Factor Authentication (MFA): MyApi integrates an authenticator app for login, significantly boosting your account's security posture. Always ensure this crucial feature remains active.
- 🔒 Implement Least Privilege for Agents: When generating scoped tokens, grant your AI agents only the absolute minimum functions and specific scopes required to perform their designated tasks, minimizing potential exposure.
- 🔒 Regularly Review Agent Permissions: Periodically access your MyApi dashboard to inspect and confirm that your agent tokens still possess appropriate access levels, and promptly revoke any tokens that are unused or no longer necessary.
- 🔒 Actively Monitor Audit Logs: Make it a practice to review the audit logs within MyApi for any unusual activity or suspicious access attempts by your connected agents.
- 🔒 Safeguard Your Core Credentials: Remember that MyApi securely stores your actual credentials in an encrypted vault; it is paramount that you never share your primary login details directly with any AI agents.
🎧 Official Support & Help Center
For support and feedback related to MyApi, users participating in the Founding Builder Beta program should utilize the direct feedback channels provided within the platform. Organizations interested in advanced features like SSO or SCIM should engage directly with the MyApi team during the beta phase.
Quick Answers for MyApi Users
Q: How does MyApi protect my service credentials from AI agents?
MyApi protects your sensitive service credentials by encrypting them with AES-256-GCM and storing them securely in a dedicated vault. Your AI agents never directly access these credentials; instead, they operate using scoped tokens that provide limited, specific permissions. This means your real passwords and API keys remain hidden and secure.
Q: What kind of AI agents can connect to MyApi?
MyApi is designed for broad compatibility, working with a variety of AI agents. This includes agents utilizing MCP (Machine Coded Protocols) and standard REST interfaces, such as Claude Code, Claude Desktop, Cursor, OpenClaw, Hermes, and any custom agent capable of holding a bearer token.
Q: Can I control what my AI agents do after connecting them to MyApi?
Absolutely. MyApi offers robust control features. You can actively monitor every API call made by your agents, establish precise rate limits to prevent overuse, receive alerts for any unusual activity, and instantly pause or revoke an agent's access directly from your dashboard.
Q: Is MyApi currently free to use?
Yes, MyApi is currently available for free as part of its Founding Builder Beta program. During this phase, all features are unlocked, all service connections are accessible, and you do not need a credit card to participate. Commercial plans will be detailed after the beta period concludes.
Q: How can I ensure my AI agents only access specific parts of a service?
MyApi enforces a strict principle of least privilege through its scoped tokens. When you create a token in the dashboard, you explicitly define its exact scopes, such as `services:gmail:read`. This ensures that agents are granted only the minimum necessary system resources and authorizations required for their specific function.
Wrap Up
MyApi stands as a crucial tool for anyone looking to integrate AI agents securely with their existing services. By providing a robust personal API gateway, it empowers users with unparalleled control over agent access, credential security, and activity monitoring. Embrace MyApi to confidently expand the capabilities of your AI agents while maintaining stringent data protection and operational oversight.