Forum Discussion

tonofpudding's avatar
tonofpudding
New Contributor
2 months ago

Moltbot Agent Secrets & Access Management

So the 1Password blog has a new post https://1password.com/blog/its-moltbot by Jason Meller about the new AI Agent hotness, Moltbot. In it he discusses how AI Agent access management should work, and...
cli
secrets management
thecatfix's avatar
thecatfix
Dedicated Contributor
1 month ago

I just read that post and started laughing hysterically. The lack of details for solutions is ridiculous. The entire service account workflow is similar to a clown running thru a minefield. (clown shoes are huge). Don’t export token. Put it in systemd credential and encrypt the op.token AND MOST IMPORTANTLY 

SETUP A SEPARATE VAULT FOR THE CLAWDBOT THAT HAS ACCESS TO TOKENS FOR THE GATEWAY SERVICE

if u give it access to all your vaults then u are playing with fire