Universal Credential-Injecting Proxy for AI Agents

One user approval per OAuth provider — then agents call any API of that provider without ever seeing tokens.

Home Readme

Connection

Point the console at any deployed CNothing instance and optionally provide the admin bearer token.

CNothing base URL

Admin bearer token

Active base URL

Admin access

Read-only until a token is set

Platform

Universal credential-injecting proxy

Providers

Connectable OAuth providers

Your grants

Connection-level agent grants

MCP tools

0 resources

How v4 works

Recommended

Agent thinks. CNothing injects credentials. Tokens never leave CNothing. Every proxied request is host-scoped, redacted, and audited.

Canonical call: POST /v4/proxy · Spec: /openapi-v4.json

1. Connect
Connect a provider once — tokens stay encrypted server-side.
2. Agent requests access
POST /v4/access-requests returns an approval link for you.
3. Approve once
Pick your connection on the approval page — one click, one time.
4. Agent calls any API
POST /v4/proxy — token injected, response redacted, fully audited.

Universal Credential-Injecting Proxy for AI Agents

One user approval per OAuth provider — then agents call any API of that provider without ever seeing tokens.

Sign in

Connect

Connect your OAuth providers once — tokens are stored encrypted, server-side.

Mobile approvals

Pair your iPhone with a QR code and approve agent requests from a push notification, like Okta Verify.

Agents

Grants

Review and revoke the connection-level access you granted to agents.

Readme

Review the project overview, privacy model, and SDK guidance from the repository document.

Agent skill (v4)

Required reading for agents: register → approval_url → proxy. Do not use AuthAI or /v2./v3.

Identity snapshot

Algorithm

Fingerprint

Skills

0 bundled skill(s)

For AI Agents

Only v4. Read /skill.md first: register → request_access → human opens exact approval_url → proxy. Do not use AuthAI, KV, /authorize, /v2, or /v3.

Primary Skill (required)

Agent prerequisites and full GitHub/OAuth flow via v4 proxy.

/skill.md

MCP Discovery

Machine-readable MCP entry with the v4 universal proxy tools.

/.well-known/mcp

MCP Manifest

Manifest metadata for MCP-compatible hosts and tool discovery.

/mcp/manifest

OpenAPI v4

Universal credential-injecting proxy API — access requests, grants, proxy.

/openapi-v4.json

Getting started

Same content as /skill.md — quick-start markdown for agents.

/getting-started.md

Skills JSON

Public JSON index of bundled v4 skills.

/skills/index.json