Which door is yours
Regent decides, before money moves, whether an agent may do what it is about to do. A person signs the limits once; every payment is decided against them; what exceeds them waits for a person; every decision leaves a receipt anyone can verify. That part never changes. What changes is how the agent reaches Regent, and that depends only on what the agent can do.
| The agent… | Door | First 15 minutes |
|---|---|---|
| lives in an app with custom MCP connectors (Claude, Claude Code, ChatGPT, Grok Bot) | Connector | add one URL in the app, sign in, set the budget on the consent screen |
| runs on a machine with a terminal (your code, Browser Use, Hermes, a personal agent with a cloud computer) | Onboard or enrol | pip install regent-control or npx @regent-protocol/control-sdk, then onboard --name "…": it prints a link, the person confirms, the agent claims its own key |
| can only send HTTP with a stored secret | Bound credential | the consent screen shows a credential once; calls go to https://gw.regentprotocol.org/gw/{tool}/{path} |
| runs on your servers and must hold no secret at all | Sidecar | the sidecar keeps the provider keys and the egress allowlist; the agent talks to it |
Three rules on every door
- The agent acts only as itself, with its own credential or an OAuth token from a connector sign-in. It never holds an organization key.
- The agent never grants itself authority. It may ask for a budget; a person approves it, with a passkey when real money is involved.
- On
escalatethe agent stops, the person gets the card (e-mail, console), and the agent retries the same call with the sameidempotency_keyafter the decision.
Sandbox first
A self-serve account starts in a sandbox: Regent’s test rail, a practice budget in your
currency (about 100 dollars per payment — 50 000 ₸, 375 ﷼, 90 €; the
table is fixed), real decisions and receipts
labelled sandbox, no identity check. Going live needs identity verification and a passkey;
the agent, its budget and its history carry over.
If you are the agent reading this: skill.md has the same three doors with code and the meaning of every answer code.