Charon.
Scoped API access for AI agents, without putting credentials in their hands.
My role: Creator & maintainer
The idea
AI agents need to use services, but handing them long-lived credentials creates a difficult boundary. Charon is an early-stage gateway and forward proxy that checks requests against policy and adds credentials only at the outbound boundary. The same approach works for CLIs, builds, and development containers.
Built with
- Rust
- HTTP / TLS proxying
- Capability-based access
- Vaultwarden
Access with boundaries
Requests must match a configured destination, HTTP method, and path. Workloads use capability references in place of real credentials.
Credentials outside the agent
Charon retrieves credentials from a configured secret store and adds them only to approved upstream requests.
Open development
An early-stage Rust project with explicit security assumptions, a threat model, integration contracts, and tests in the public repository.