UnYOLO lets GitHub agents act without ever holding the real token

UnYOLO: Agent credential broker and policy engine for your GitHub account

UnYOLO is a framework for building credential brokers and proxies for services like GitHub, Hugging Face, or Google Workspace. Agents talk to the broker and never hold the real credential, with fine-grained policies stored in a local file. It supports timed grants that expire, operator approvals via a protected inbox or Telegram, and includes brokers for GitHub, Hugging Face, and sudo. The policy engine uses a fixed decision order where deny wins over everything, and requests that match no rule are refused.