Your First Proposal

Go from a fresh install to an approved proposal in under 2 minutes.

When an agent needs access to a service that isn’t configured yet, it creates a proposal, a request for you to review and approve before any credentials are granted. This walkthrough takes you through that flow end-to-end.

Prerequisites

• A running Agent Vault server with an account (see installation guide)

1. Create an agent invite

If you haven’t logged in yet, you’ll be guided through setup automatically.

CLI

agent-vault agent invite my-agent

This generates a one-time onboarding prompt and copies it to your clipboard.

Web UI

Go to the Agents tab and click Invite agent. Enter a name and optionally pre-assign vault access. Copy the generated prompt.

2. Paste the prompt into your agent

Open your agent (Claude Code, Cursor, or any supported agent) and paste the invite prompt. The agent redeems the invite automatically and receives an agent token.

3. Give the agent a task

Ask the agent to do something that requires an external API:

“Fetch my recent Stripe charges”

“List my open GitHub issues”

“Check my Cloudflare DNS records”

4. Approve the proposal

Here’s what happens — with zero pre-configuration:

1. The agent routes the request through Agent Vault
2. Agent Vault returns a 403 — the service isn’t configured yet
3. The agent reads the proposal_hint, creates a proposal requesting access, and presents you with an approval link
4. You click the link, paste your API key, and click Allow
5. The agent retries — Agent Vault reconstructs the request with the real credentials and the request succeeds

No pre-configuration was needed. The agent discovered what it needed, raised a proposal for approval, and handled the rest.