AgentLock
AgentLock is a security gateway for AI agents: agents request, you approve on your phone. Zero-knowledge key vault, full audit trail, free plan available.
A startup from Switzerland.
AgentLock is a security gateway for AI agents: agents request, you approve on your phone. Zero-knowledge key vault, full audit trail, free plan available.
A startup from Switzerland.
This page is designed to help you find out whether AgentLock is good and if it is the right choice for you.
AgentLock is a security gateway between AI agents and the services they touch. An agent sends its intended action - an HTTP call, an MCP tool call, a browser session, an SSH command - through AgentLock, where a policy decides whether it runs, is blocked, or needs human approval. Approvals arrive on the phone or in the dashboard and they expire, so an unattended request fails closed instead of running unchecked.
Credentials stay in a vault encrypted with AES-256 and are never handed to the agent: AgentLock injects them at execution time and redacts secrets out of requests and logs. Every action lands in a timeline with the request, the decision and the result, and supported actions can be undone.
The free plan covers 100 actions a month with one agent and two credentials. Pro raises that to 2,000 actions, five agents and 90 days of history; Teams covers 10,000 actions, 20 agents, unlimited credentials and ten team members.
Listed in
Human Approval Gateway
Every agent action runs through a policy: allowed, blocked, or held for a human approval that arrives on the phone and expires if nobody answers.
Zero-Knowledge Credential Vault
Secrets are stored AES-256 encrypted and injected only at execution time, so the agent never sees the key itself.
Audit Trail And Undo
Each request, decision and result lands in a timeline, and supported actions can be undone afterwards.
AgentLock sits between the agent and the outside world instead of trusting the agent to behave. Every HTTP call, MCP tool call, browser action or SSH command becomes a request that a policy decides on, and anything sensitive waits for a human approval that arrives on the phone. Credentials live in the vault and are injected only at execution time, so an agent can use a key without ever seeing it - and if nobody approves in time, the action simply does not happen.
A secrets manager stores keys, but once an agent holds one, nothing stops it from making the wrong call. AgentLock covers both halves: the encrypted vault plus a gateway with policies, human approval, automatic redaction, a full timeline and undo for supported actions. It is available as an MCP server and an SDK, so an existing agent can be routed through it without a rewrite, and the free plan already covers 100 actions a month with one agent.
Developers who run autonomous agents against real systems - deployments, payments, mail, customer data - and want an audit trail and a stop button instead of hoping the prompt holds. Small teams also use it to let an agent work with shared credentials without handing the keys to every team member or to the model itself.
TypeScript across the stack: a React dashboard on Vercel, Supabase with Postgres, Auth and Edge Functions for data, policies and the encrypted vault, a self-hosted runner for actions that need a private network, React Native for the iOS and Android approval app, and Stripe for billing.
We have collected here some useful links to help you find out if AgentLock is good.
Check the traffic stats of AgentLock on SimilarWeb. The key metrics to look for are: monthly visits, average visit duration, pages per visit, and traffic by country. Moreoever, check the traffic sources. For example "Direct" traffic is a good sign.
Check the "Domain Rating" of AgentLock on Ahrefs. The domain rating is a measure of the strength of a website's backlink profile on a scale from 0 to 100. It shows the strength of AgentLock's backlink profile compared to the other websites. In most cases a domain rating of 60+ is considered good and 70+ is considered very good.
Check the "Domain Authority" of AgentLock on MOZ. A website's domain authority (DA) is a search engine ranking score that predicts how well a website will rank on search engine result pages (SERPs). It is based on a 100-point logarithmic scale, with higher scores corresponding to a greater likelihood of ranking. This is another useful metric to check if a website is good.
The latest comments about AgentLock on Reddit. This can help you find out how popualr the product is and what people think about it.
Do you know an article comparing AgentLock to other products?
Suggest a link to a post with product alternatives.
Is AgentLock good? This is an informative page that will help you find out. Moreover, you can review and discuss AgentLock here. The primary details have been verified within the last quarter. So they could be considered up to date. If you think we are missing something, please use the means on this page to comment or suggest changes. All reviews and comments are highly encouranged and appreciated as they help everyone in the community to make an informed choice. Please always be kind and objective when evaluating a product and sharing your opinion.
