Pages on tokening.net

About

Mon, 26 Oct 2026 00:00:00 +0000

Tokening is a small gateway that lets an AI agent do one job against your API without holding your API key. You issue a grant for the task: this post, these fields, one use, fifteen minutes. The agent gets the grant’s secret. Tokening keeps the real key, checks every call against the grant and writes down what it decided and why.

It exists because most APIs only offer broad keys. An agent asked to fix a typo usually ends up with a password that can delete the site. Prompt injection makes that worse. A page the agent reads can tell it to do something else, and nothing stands between that instruction and the API. A grant is that something.

Contact

Mon, 26 Oct 2026 00:00:00 +0000

Write to info@tokening.net with questions, use cases or ideas. The most useful message describes a task you’d like to hand to an agent and where the permission gets awkward. That’s what decides which templates come next.

Found a bug? Open an issue with the version, your operating system, a small policy with made-up values and the steps that show the problem. The refusal code helps. Please strip grant secrets, admin tokens, vault keys and real credentials before you paste anything.

Demo

Mon, 26 Oct 2026 00:00:00 +0000

A scripted agent gets a grant to edit one WordPress post, once. Then it tries to do more. Press Play, or step through it, and watch what Tokening allows and why it refuses the rest. This is a recording from a throwaway WordPress in Docker, so nothing here contacts a real site.

What you just watched:

Download

Mon, 26 Oct 2026 00:00:00 +0000

The current version is 0.1.1. Each archive has the tokening binary, an example policy, the manuals and licence notices. Apple Silicon Macs use arm64, Intel Macs use amd64.

System	Archive
Linux, Intel or AMD	tokening-linux-amd64.tar.gz
Linux, ARM64	tokening-linux-arm64.tar.gz
macOS, Intel	tokening-darwin-amd64.tar.gz
macOS, Apple Silicon	tokening-darwin-arm64.tar.gz
Windows, Intel or AMD	tokening-windows-amd64.zip

Check the download

Get SHA256SUMS too, then compare the hash of your archive with the matching line:

sha256sum tokening-linux-amd64.tar.gz          # Linux
shasum -a 256 tokening-darwin-arm64.tar.gz     # macOS
Get-FileHash -Algorithm SHA256 tokening-windows-amd64.zip   # Windows PowerShell

The checksums prove the file arrived intact. They aren’t a separate signature.

Quick Start

Mon, 26 Oct 2026 00:00:00 +0000

This page takes you from nothing to an AI agent making one allowed call through Tokening. Allow about fifteen minutes. If you only want to see it work first, step through the recorded demo or run it yourself in step 1.

1. Run the demo on your machine

You need Git, Docker Compose v2 and Python 3. Nothing here touches a real website.

git clone https://github.com/softdevstudio/tokening.git
cd tokening
make demo

The script starts a throwaway WordPress, issues two grants, runs a scripted agent against them and checks the posts afterwards. Then it deletes everything it made. The replay and decision log land in test/results/local/demo/. Open replay.html in a browser to step through your own run.

Reference

Mon, 26 Oct 2026 00:00:00 +0000

Everything Tokening 0.1 understands, on one page. The full manuals live in the repository docs.

The four parts

Part	What it is	Who holds it
Target	An API Tokening can reach: an MCP server over HTTP, or a REST base URL, plus its real credential	Operator, in the policy file and the encrypted vault
Template	A permission shape: one tool (or one HTTP method and path), the arguments allowed, their limits, the most uses and the longest lifetime	Operator, in the policy file
Grant	A template filled in for one task: the post ID, the number of uses, the deadline, who it’s for and why	Agent holds the secret; Tokening holds the record
Decision	The result of every call: allowed or refused, a code, a reason, the grant	Audit log, exportable as JSONL

Issuing a grant can only narrow a template. A text-edit template can never become a delete.