Integrations

The upstreams agents reach through the gateway.

warden-gateway is forked from OneCLI, so it speaks the same app catalog — agents reach external services through it while the real credentials stay sealed in the vault and are injected at the edge.

Common upstreams: LLM providers (Anthropic, OpenAI), developer tools (GitHub, Stripe), and cloud / SaaS APIs. Every request is policy-checked, and sensitive routes can be held for owner sign-off.

Wire one up

warden secret add <name> --host <host>                # store the credential (sealed)
warden warrant issue --secrets <name> --policy <p>    # scope a warrant to it

Then route the agent through the gateway with its warrant token. The agent never sees the key — see Gateway.