credential-broker

unYOLO is a framework for building credential brokers and proxies for AI agents. It keeps provider credentials out of the agent, applies local policy rules, supports timed grants and operator approvals, and includes brokers for GitHub, Hugging Face, and approved Unix commands.

A survey of eight tools that sit between AI agents and the services they call, covering credential injection, interception, policy enforcement, and mocking/testing. The page explains what each tool is for, where it fits, and what to watch out for.