SecretAgent
SecretAgent - Secure secret management tools for crypto-native AI agents. Pay-as-you-go LLM keys allow autonomous agents to pay for their own LLM access, or bring your own keys for any API. Proxy-injected secrets give you central monitoring and a kill-switch.
Problem Statement
SecretAgent is a secrets management tool for crypto-native AI agents.Projects can use pay-as-you-go LLM API keys (owned by us) or bring their ownCentralized secret management with integrated access logs and fleet monitoringSecrets are inserted by a proxy so agent never has direct accessSupports any API, not just LLMs (placeholder keys are replaced by the proxy)Agent auth and payments powered by crypto walletsCentral project wallet enablesagents to pay for their own LLM access!Enables instant config updates without code changes or redeployingHow it worksUsers authenticate with their own wallet, and create one or more projects. Each project gets its own Privy server wallet which will pay for all usage.Each project can contain multiple config items. These can be three different types:LLM- pay-as-you-go access to LLM APIs. Enables dynamic switching of provider, model, and model settings without redeploymentProxy- bring-your-own API key for any API (not just LLMs). Each key has a value and a domain matching pattern(s).Static- config that can be fetched directly by an agent. Useful for non-sensitive config or situations where simple proxying may not work.Each project has a list of allowed agents, identified by their wallet address. Authentication between the agent and API uses signed messages by the agent wallet.Admins can manage this list and immediately revoke access from a rogue agent!Our JS SDK is extremely easy to use. It needs only the project ID, agent wallet address, and a wallet signing method. Everything else happens transparently, as the proxy behaviour happens at the HTTP layer. This means users do not need to adjust their LLM or other API integrations at all.The core project has 3 parts:Sweb app - management console for agent config and monitoringsnpm module - client library to integrate with agent codeSecretAgent API - API that powers the web app and the client library proxyAdditionally, we have example repos showing how the tool can be used with various agent toolkits.
Solution
SecretAgent is powered by:C- Onchainkit, Agentkit - Used CDP heavily for wallet connect / login, integrated onramp/funding, balances, and our example agent is based on AgentKit. Also used coinbase API for checking current eth price.B- L2 provider for payments - We chose Base as the L2 to handle payments for our platform. Integrated onramp to pay for your project uses Base and is integrated with CDP. We wanted this app to be approachable for general devs (not just crypto folks) so Base and deep Coinbase integration was a natural fit.P- Server wallets with policies - Each project provisions a new Privy server wallet to fund all activity. This wallet has an attached policy to make sure funds can only be used to pay for our service.A- Example Agent deployment - Additionally, we built into our website UI the ability to chat with an Autonome-hosted agent.I- checking current balancesNon-crypto toolsD- Secrets managementN- Web appT- StylingH- API frameworkD- Database / ORMC- API hostingThe agent SDK does some patching of global nodejs fetch and https methods, so that it will intercept all requests without users needing to adjust how they call various APIs. This is tricky to get right, but it means the tool is much easier to integrate and much more flexible!
Hackathon
Agentic Ethereum
2025
Prizes
- 🏆
Best Combination of AgentKit and OnchainKit
Coinbase Developer Platform
- 🏆
AgentKit Pool Prize
Coinbase Developer Platform
- 🏆
🏆 Agentic Ethereum 2025 Finalist
ETHGlobal
Contributors
- sergical
60 contributions
- theoephraim
51 contributions
- philmillman
28 contributions