# Let your AI agent sign up for any API.

Private alpha opening soon

You approve once. Suffect creates the account in your name, caps the spend, and hands your agent a key that expires.

- [Get early access](/#early-access)
- [See how it works](/#how)

## How it works

1. **Your agent asks** When a vendor like ElevenLabs requires an account, a key or a subscription, your agent makes one call to Suffect: `request_access`, or `suffect request` from a terminal.
2. **You approve once** Your agent wants an account at ElevenLabs. One sheet shows the terms and the budget; you agree and sign up with your passkey.
3. **It gets a key that expires** Granted: a base URL and a token through Suffect's proxy, inside the budget. The ElevenLabs key stays in a vault.

## Built for the agents you already run

One server, one skill and one command line: whichever your agent speaks, it can ask Suffect for access.

- **MCP server**: for any MCP client, with OAuth sign-in
- **Agent skill**: one SKILL.md that triggers on 401, 402 and 403
- **CLI**: `suffect request` from any terminal

Runtimes: Claude Code, Codex, Cursor, Gemini CLI, OpenClaw.

## Access for your agent. Control for you.

### One key for every API

Search with Exa, voice with ElevenLabs, video with Higgsfield, scraping with Firecrawl, inference with fal.ai: one credential and one price list for your agent. Every account is yours.


### Spend capped by your budget

Calls Suffect can price are priced first and refused past the budget you set: a search inside the cap runs, a batch job past it is refused before anything is spent.


### The key never reaches your agent

Your agent holds a proxied URL; the vendor key stays in the vault.


### A signed record of every approval

The consent record names the provider, its terms by version and hash, and the budget, signed by your passkey and countersigned by Suffect.

[The record, field by field](/spec#record)

### Never fights bot defenses

Every signup request carries a signature. A CAPTCHA is handed to you, never solved for you.

[For site operators](/bot)

### Revoke any time

An approval stays active until you turn it off. Turn off Higgsfield and its key is revoked at once, while ElevenLabs keeps working.


## For agents, and the APIs they call

### For agents: Start with request_access.

Install the skill or point any MCP client at Suffect. When a vendor answers 401, 402 or 403, your agent asks Suffect instead of asking you for a key.

```text
request_access {
  "provider": "elevenlabs.io",
  "budget": {
    "amount": 20,
    "currency": "USD",
    "period": "month"
  }
}
// pending_consent: one sheet goes to your human

// once they approve
get_grant { "request_id": "req_01K8QX3M7T…" }
// granted: a proxied base URL and a token that expires
// https://proxy.suffect.com/v/elevenlabs.io
```

[Agent docs](/agents)

### For API vendors: Agent-originated customers, with a human who agreed.

Publish one file at `/.well-known/suffect.json` and every agent signup becomes a signed, one-call account in a real human's name.

```json
{
  "suffect": "0.2",
  "provider": {
    "name": "Example API",
    "domain": "example.com"
  },
  "terms": [{
    "kind": "terms_of_use",
    "url": "https://example.com/terms",
    "version": "2026-06-01",
    "sha256": "9f3c0a7e5b1d4c2a8e6f0b3d7c9a1e5f2b4d6c8a0e1f3b5d7c9a2e4f6b8d0c1e"
  }],
  "signup": {
    "level": 3,
    "endpoint": "https://api.example.com/suffect/signups"
  }
}
```

[Vendor docs](/vendors)

## Questions

### Can I use it today?

Not yet. As of 2026-10-20, the loop runs end to end against test vendors; the production service is not live, and no vendor account has been created for anyone. The private alpha opens soon.

### Will vendors block this?

Some may. Suffect never evades a defense: every signup request is signed and identified, a challenge goes to you, and a vendor that publishes a manifest turns these signups into one signed call. Blocking costs a vendor a customer; a manifest wins one.

### Is this a password manager for agents?

No. A password manager stores what you already created. Suffect creates the relationship, records your consent, caps the spend and keeps the key out of the agent.

### Is an agent clicking accept binding?

UETA and E-SIGN bind the human an electronic agent acts for, and the signed record is the evidence that you approved. No court has ruled on the question yet.

### What does it cost?

Nothing during the alpha. Developers will pay for Suffect afterwards. Suffect adds no markup to a vendor's price: the price on the sheet is the vendor's own.

## Get early access

The private alpha opens soon for a small group of developers and API vendors. Write to hello@suffect.com with what your agent needs, or the API you run.

- [Email Suffect](mailto:hello@suffect.com?subject=Early%20access)
- [Follow on GitHub](https://github.com/suffect-dev)

---

Canonical: https://suffect.com/. Every page of this site has a Markdown twin at the same path plus `.md`; the index is https://suffect.com/llms.txt.