For Agents
An agent operator can register agents, store upstream credentials, and write permission rule sets through the Control Plane, then have the agent forward authenticated calls to any upstream API through the Broker without ever holding the secret. The two APIs let an agent act within deliberate, auditable bounds set by its operator.
Jentic One separates deciding what an agent may call from executing the call: the Control Plane holds credentials, permission rules, agent identities, and the audit log, while the Broker forwards the authenticated request with the secret injected at the proxy. That split lets an operator bound an agent's reach centrally and route every outbound call through one auditable egress point, rather than embedding keys and access logic in agent code.
2 APIs across 2 product groups. All share one credential.
| I want to... | Use |
|---|---|
| Decide what an agent is allowed to call and store its credentials | Jentic One Control Plane API |
| Make an authenticated call to an upstream API without the agent holding the secret | Jentic One Broker API |
| Review what an agent actually did and under which credential | Jentic One Control Plane API |
Install Jentic One Beta
Jentic One is a self-hosted execution layer for AI agents. It lets your agent call the Jentic APIs, or any other public or private API you need. You set the rules, the agent never sees your credentials, and every call is logged.
Two steps, two machines. Install the instance in a safe environment, then register your agent from wherever it runs.
Step 1: Jentic One Host machine
# On the machine that will host your Jentic One instance:
curl -fsSL "https://jentic.com/install.sh?src=apis&api=%2Fapis%2Fjentic.com" | shStep 2: Agent machine
# On the machine where your agent runs (keep this separate from the instance):
curl -fsSL "https://jentic.com/install.sh?src=apis&api=%2Fapis%2Fjentic.com" | sh
jentic register # connects your agent to your Jentic One instanceJentic One is in public beta. The setup above keeps your agent separate from the instance, which is what you want before using real credentials: an agent running as the same OS user as Jentic One can read its stored keys directly. Just evaluating? A single local install is fine to start. See the secure deployment guide for the tiers.
Once connected, ask your agent something like: “govern and proxy an AI agent's upstream API calls with Jentic One”.
What agents get from Jentic-routed access to this vendor.
Setup
Building agent API governance by hand means standing up credential storage, a rules engine, agent registration, an audit trail, and a credential-injecting proxy yourself. With Jentic One you install once, import the Control Plane and Broker from the API Directory, store the bearer token once, and your agent calls the operations it needs.
Permission scoping
The Control Plane carries agent and credential ids in the URL path and the Broker splits forwarding by HTTP method, so a rule can pin an agent to specific records and allow read forwarding while withholding destructive forwards. You choose the operation set, so an agent gets exactly the reach you grant and nothing more.
Credential isolation
Your bearer tokens and the upstream credentials the Broker injects are stored once, encrypted, by your own Jentic One instance and injected at execution time. They never enter the agent's prompt, logs, or context, and running the agent on a separate machine keeps it from reading the stored keys.
Intent-based discovery
Agents search Jentic by intent such as 'write a permission rule set' or 'call an upstream API with injected credentials', and Jentic returns the matching Control Plane or Broker operation with its input schema so the agent calls the right endpoint without browsing the reference docs.
Specific to using Jentic APIs through Jentic.
How do the Jentic One Control Plane and Broker APIs fit together?
They split the work of making an agent's API calls governable. The Control Plane decides what is allowed: it stores credentials, writes permission rule sets, registers agents, and keeps the audit log. The Broker executes: it forwards the authenticated request to the upstream API with the stored credential injected at the proxy. The Control Plane configures and records, the Broker runs the call, so an operator can bound an agent's reach without putting access logic or secrets in agent code.
Does one credential work across both Jentic One APIs?
Yes, within one instance. Both APIs authenticate the caller with a bearer token, and a token issued for a Jentic One instance reaches both the Control Plane and the Broker on that instance. The upstream credentials the Broker injects are separate: they are stored by the Control Plane and are never returned to callers in plaintext.
Which Jentic One API should an agent call for a given task?
Use the Control Plane to administer access: register agents, store or rotate credentials, write permission rules, and read the audit log. Use the Broker to make an actual outbound call: forward a request to an upstream API and get the response back. A full workflow usually starts in the Control Plane to set up access and then uses the Broker to execute within it.
Where does Jentic One run, and what does it not do?
Jentic One is self-hosted: you install it and run it on your own infrastructure. The setup keeps the agent on a machine separate from the instance so the agent cannot read stored credentials directly. It governs and forwards API calls; it does not handle end-user login or SSO, host end-user data, or run the agent's own workloads.
Do I need a separate MCP server to use these APIs with an agent?
No separate per-API MCP server is needed. You install Jentic One and import the API you need, and your agent reaches it through Jentic One's own interface, available as a command-line tool or an MCP server. Store your bearer token once and operations are discovered on demand by intent, so no extra per-API tool definitions sit in the agent's context.
BOOK A DEMO
Browse thousands of APIs and connect them all to your agent with Jentic One. One layer, one credential — every API your agent needs.
Use for: Governing and executing the API calls an AI agent makes on a self-hosted Jentic One instance: registering agents, storing credentials, writing permission rules, auditing executions, and forwarding authenticated requests to upstream APIs
Not supported: end-user login and SSO, hosting end-user data, running agent workloads, standalone secret storage
Credentials: Both APIs authenticate the caller with a bearer token per their OpenAPI specs, and the upstream credentials the Broker injects are stored by the Control Plane and never returned to callers in plaintext. One bearer token authenticates against a single Jentic One instance, so the same token reaches both the Control Plane and the Broker on that instance.
All 2 Jentic OpenAPI documents are vendor-official and indexed by Jentic, kept validated and agent-ready.
Jentic One is a self-hosted platform that governs and executes the API calls an AI agent makes. It is published as two APIs that split cleanly along a control-plane and data-plane line. The Control Plane API administers which registered APIs an agent may call, for whom, and with which credentials, and keeps an audit log of every execution. The Broker API is a stateless proxy that forwards authenticated requests to upstream APIs, injecting stored credentials at the edge so the secret never reaches agent code.
Each workflow spans multiple Jentic APIs. Jentic routes each operation to the right API automatically.
Provision a scoped agent, then let it call upstream APIs
An operator registers an agent, stores an upstream credential, and attaches a permission rule set through the Control Plane, then the agent forwards its allowed calls through the Broker. The two APIs cover setup and execution in sequence, so the agent starts with exactly the access it needs and the Broker enforces it on every call.
Register the agent and store the upstream credential with the Control Plane, attach a rule set naming the allowed operations, then forward a request to the upstream API through the Broker and read back the response.
Jentic One Control Plane API + Jentic One Broker API
Route outbound calls through one audited egress point
A team wants every outbound API call from its agents to pass through one place that can be logged and controlled. The Broker forwards method, headers, and body unchanged through a single egress point, and the Control Plane records each execution in its audit log, so outbound traffic is both centralised and reviewable.
Forward an upstream GET through the Broker so it passes the central egress point, then list the execution in the Control Plane audit log to confirm it was recorded.
Jentic One Broker API + Jentic One Control Plane API
Curate a governed API catalog for agents
An operator decides which third-party APIs the platform may call by importing their specs and reviewing the operations through the Control Plane, then the agent discovers and forwards only those approved operations through the Broker. The surface an agent can reach stays deliberate rather than open-ended.
Import an upstream OpenAPI spec and review its operations with the Control Plane, then forward a call to one of the approved operations through the Broker.
Jentic One Control Plane API + Jentic One Broker API
Rotate a credential without redeploying the agent
A credential needs to change without touching running agents. The operator rotates the stored credential through the Control Plane, and the Broker injects the new secret at the proxy on the next forwarded call, so the agent keeps working with no code change and no secret ever on the agent.
Rotate the stored upstream credential with the Control Plane, then make a forwarded call through the Broker and confirm it uses the new secret without any change to the agent.
Jentic One Control Plane API + Jentic One Broker API
How are credentials kept away from the agent across both APIs?
Credentials are stored once, encrypted, by your own Jentic One instance and injected at execution time. The Control Plane holds and rotates them, the Broker injects the upstream secret at the proxy, and in both cases the secret never enters the agent's prompt, logs, or context. Running the agent on a machine separate from the instance keeps it from reading the stored keys directly.
All 4 are in the Jentic catalogue with the same one-credential, intent-search pattern.