Agentlock vs ShieldNode

AI agents send emails, call APIs, modify databases, and trigger payments on your behalf. Without AgentLock, they do it with direct access to your credentials — and without asking. AgentLock is a security-first approval platform that sits between your AI agents and the real world. Every action goes through you. Every credential stays encrypted. Every mistake can be undone. REAL-TIME APPROVALS When an agent wants to act, you get a push notification instantly. You see the action, the target, and the risk level — categorized as Read, Write, Financial, or Admin. Approve with Face ID or deny with a tap. Hold-to-Approve prevents accidental confirmations. Unanswered requests expire automatically. TIMELINE & UNDO Every agent action is logged in a detailed timeline — agent, action, timestamp, status, result. Like a bank statement for everything your AI does. When something goes wrong, hit Undo to reverse supported actions. Undo requires re-approval for safety. ENCRYPTED CREDENTIAL VAULT API keys, passwords, and tokens are stored with envelope encryption. Your agents never see them — not in transit, not at rest, not ever. The secure runner decrypts only at the moment of execution, in memory. No API endpoint returns a decrypted secret. POLICY ENGINE Define what gets approved automatically, what needs your confirmation, and what gets blocked entirely. Read actions pass through. Write actions require approval. Admin actions are blocked by default. Add domain allowlists for HTTP access. BUILT ON SECURITY - Ed25519 signed requests with replay protection - End-to-end encryption with per-workspace content keys - Row-level security on all database tables - Append-only audit log — no deleting, no editing - Session tokens stored in the iOS Keychain - No tracking SDKs, no ads WORKS WITH ANY AGENT AgentLock is agent-agnostic. Integrate using open SDKs for Node.js and Python. Manage agents, policies, credentials, and team members from the web dashboard at agentlock.net.

ShieldNode is the secure vault and live control panel for every API key your AI agents touch. THE PROBLEM AI agents are powerful, and you give them your API keys to get real work done. But a misfired prompt, a bad tool call, or a runaway loop can drain your Stripe credits, hit your OpenAI rate limits, or post the wrong thing to your Slack. Once an agent has the key, you are trusting it with everything that key can do. THE FIX Your real upstream keys live in our encrypted vault, never in a prompt, never in a config file, never in your agent's context. Your agents only ever see virtual keys that route through our proxy. The proxy decrypts the real credential in memory at the exact moment the request needs to go out, and the value never gets returned to any caller. Every sensitive call can ask you first. DROP-IN AGENT SKILL The piece that makes the whole thing work for anyone using an AI assistant: a free, open-source ShieldNode skill that plugs straight into Claude, ChatGPT, Cursor, Codex, and any agent that can load instructions. One install and the agent learns to use virtual keys correctly, request the right approval duration, identify itself by name in your notifications, and back off cleanly when you decline. You do not have to teach your agent anything. The skill does it. PUSH APPROVAL The killer feature. When your AI agent tries to use a protected key, you get a time-sensitive push notification. Approve from the lockscreen, set a duration (5 minutes, 30 minutes, 2 hours, or custom), and the agent gets through for exactly that window. Decline, and the request dies on the spot. No app switch. No dashboard hunting. UNIVERSAL VAULT One app, every API. Stripe, GitHub, OpenAI, Anthropic, SendGrid, Slack, Notion, anything that takes a key. Add a new service in seconds with the in-app AI Configurator: point it at the docs, it auto-fills the auth scheme and base URL for you. FULL CONTROL Pause a key. Disable a service. Delete a virtual credential. Watch every call land in your live audit log with the method, path, status, latency, plus the agent name and decision when a request was gated by approval. EMERGENCY STOP One tap. Every key locks. Every agent freezes. No confirmation, no delay. The big red button you always wished you had. WHO IT IS FOR - Developers shipping autonomous agents and tired of waking up to surprise bills - Builders letting AI access production credentials and needing a human in the loop - Anyone who hands an API key to an AI agent securely SUBSCRIPTIONS Free plan: 2 services and 500 requests per month, no credit card required. Push approval, the universal vault, and the emergency stop are included from day one. Pro Monthly: $9.99 per month, auto-renewable. Unlocks unlimited services, 100,000 requests per month, longer log retention, and request tracking. Pro Annual: $69.99 per year (effective $5.83 per month), auto-renewable. Same Pro features billed yearly. 14-day Pro trial available, no card up front. Payment will be charged to your Apple ID account at the confirmation of purchase. Subscriptions automatically renew unless canceled at least 24 hours before the end of the current period. Your account will be charged for renewal within 24 hours prior to the end of the current period. You can manage and cancel your subscriptions by going to your Apple ID account settings after purchase. Privacy Policy: https://shieldnode.app/privacy Terms of Use (EULA): https://www.apple.com/legal/internet-services/itunes/dev/stdeula/ Real keys stay encrypted in our vault. Virtual ones do the work. The skill teaches your agent. You stay in control.