---
title: "Secure Agent Access With Brokerkit"
date: 2026-07-16
canonical: https://solmaz.io/x/2077817110986989625/
x_url: https://x.com/onusoz/status/2077817110986989625
license: CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/)
---

I deleted my agent accounts. I don't need them anymore for secure access to GitHub and Hugging Face repos

Instead, I am using brokerkit, a credential broker swiss army knife which can build an approval gate around any system

My agents automatically get read access to all my repos, unless I specify certain ones to be excluded

They then have to open PRs which only I can merge. Unless I allowlist them on certain repos to push to the main branch

Best feature: Timed requests. e.g. "I want to be able to push to the main branch next 2 hours", "I want to release this package only once in the next 5 minutes"

Which saves me from the hassle of changing a config for some short term change, but also protects me from the woes of long term prompt-injection risk

My openclaw instance has its own linux user on my workstation, and is no longer root. It uses gh-broker and hf-broker from inside its account. Can also run sudo through sudo-broker, to install stuff. Secure access for free, without having to set up a separate server

It ingests quite a bit of information from the internet every day, and the remaining lethal trifecta risk is leaking of some of my private repos, and nothing else

Repo: