Skip to content

Private alpha opening soon

Let your AI agent sign up for any API.

You approve once. Suffect creates the account in your name, caps the spend, and hands your agent a key that expires.

Get early access
See how it works

How it works

  1. Your agent asks

    When a vendor like ElevenLabs requires an account, a key or a subscription, your agent makes one call to Suffect: request_access, or suffect request from a terminal.

  2. You approve once

    Your agent wants an account at ElevenLabs. One sheet shows the terms and the budget; you agree and sign up with your passkey.

  3. It gets a key that expires

    Granted: a base URL and a token through Suffect's proxy, inside the budget. The ElevenLabs key stays in a vault.

Built for the agents you already run

One server, one skill and one command line: whichever your agent speaks, it can ask Suffect for access.

  • MCP serverfor any MCP client, with OAuth sign-in
  • Agent skillone SKILL.md that triggers on 401, 402 and 403
  • CLIsuffect request from any terminal

Runtimes

  • Claude Code
  • Codex
  • Cursor
  • Gemini CLI
  • OpenClaw

Access for your agent. Control for you.

For agents, and the APIs they call

For agents

Start with request_access.

Install the skill or point any MCP client at Suffect. When a vendor answers 401, 402 or 403, your agent asks Suffect instead of asking you for a key.

request_access {
  "provider": "elevenlabs.io",
  "budget": {
    "amount": 20,
    "currency": "USD",
    "period": "month"
  }
}
// pending_consent: one sheet goes to your human

// once they approve
get_grant { "request_id": "req_01K8QX3M7T…" }
// granted: a proxied base URL and a token that expires
// https://proxy.suffect.com/v/elevenlabs.io

Agent docs

For API vendors

Agent-originated customers, with a human who agreed.

Publish one file at /.well-known/suffect.json and every agent signup becomes a signed, one-call account in a real human's name.

{
  "suffect": "0.2",
  "provider": {
    "name": "Example API",
    "domain": "example.com"
  },
  "terms": [{
    "kind": "terms_of_use",
    "url": "https://example.com/terms",
    "version": "2026-06-01",
    "sha256": "9f3c0a7e5b1d4c2a8e6f0b3d7c9a1e5f2b4d6c8a0e1f3b5d7c9a2e4f6b8d0c1e"
  }],
  "signup": {
    "level": 3,
    "endpoint": "https://api.example.com/suffect/signups"
  }
}

Vendor docs

Questions

Can I use it today?

Not yet. As of 2026-10-20, the loop runs end to end against test vendors; the production service is not live, and no vendor account has been created for anyone. The private alpha opens soon.

Will vendors block this?

Some may. Suffect never evades a defense: every signup request is signed and identified, a challenge goes to you, and a vendor that publishes a manifest turns these signups into one signed call. Blocking costs a vendor a customer; a manifest wins one.

Is this a password manager for agents?

No. A password manager stores what you already created. Suffect creates the relationship, records your consent, caps the spend and keeps the key out of the agent.

Is an agent clicking accept binding?

UETA and E-SIGN bind the human an electronic agent acts for, and the signed record is the evidence that you approved. No court has ruled on the question yet.

What does it cost?

Nothing during the alpha. Developers will pay for Suffect afterwards. Suffect adds no markup to a vendor's price: the price on the sheet is the vendor's own.

Get early access

The private alpha opens soon for a small group of developers and API vendors. Write to hello@suffect.com with what your agent needs, or the API you run.

Email Suffect
Follow on GitHub