AI agents
Your agent asks. You decide.
- Human approval for every request
- Time-limited and logged
- Never your whole vault
- Free, never counted as members
How it works
A request, an approval, one secret
The agent never sees your vault. It asks for a specific item and field; Passbox shows you who is asking for what, and you approve once or deny.
MCP server
Works with agents that speak the Model Context Protocol.
Human approval
Approve on the desktop or phone, once or for a short time.
Scoped and expiring
Only the vaults you allow, read-only, with an expiry.
Why not a .env file
Agents read everything you leave lying around
A coding agent can read any file in your project, including .env files and shell history. Secrets that only exist in Passbox and are handed out on request cannot leak that way.
# .env – readable by every tool and agent in this folderSTRIPE_KEY=sk_live_51H…GITHUB_TOKEN=ghp_8x…pbx run
Even without MCP, pbx run keeps secrets out of files the agent can read.
Audit log
Every request and approval is recorded.
AI in Passbox
Your model, your key
Passbox does not run AI models itself. The optional AI features use the model you choose, and your passwords and other secrets never reach it: they are removed before anything is sent.
On your device
The browser's built-in model or a model server on your own computer.
On your own server
Any OpenAI-compatible endpoint you run, such as Ollama or vLLM.
An EU provider, your key
Mistral, IONOS, STACKIT or Scaleway, with your own API key.
Off by default
Every AI feature is off until you turn it on, says what it sends and works without AI too.
FAQ
Questions, answered
Which agents work with Passbox?
Agents that speak the Model Context Protocol, for example Claude Code, Cursor or VS Code. Start pbx mcp, connect the agent, and approve its requests on another signed-in device.
Can an agent read my whole vault?
No. The design gives an agent one approved secret at a time, from vaults you allow, and never the keys to your vault.
What do agents cost?
Nothing extra. AI agents and service accounts are free with fair use and never count as members, on every plan and when you host Passbox yourself.
Which AI model does Passbox use?
The one you choose. Passbox does not host inference: use a model on your device, on your own server (for example Ollama or vLLM) or from an EU provider such as Mistral, IONOS, STACKIT or Scaleway with your own key. Secrets are never sent to a model.
Keep your agents productive and your secrets private.
Connect your agent through MCP and approve each request.