UnYOLO lets GitHub agents act without ever holding the real token
UnYOLO: Agent credential broker and policy engine for your GitHub account
UnYOLO is a framework for building credential brokers and proxies for services like GitHub, Hugging Face, or Google Workspace. Agents talk to the broker and never hold the real credential, with fine-grained policies stored in a local file. It supports timed grants that expire, operator approvals via a protected inbox or Telegram, and includes brokers for GitHub, Hugging Face, and sudo. The policy engine uses a fixed decision order where deny wins over everything, and requests that match no rule are refused.
The broker holds the token. The agent asks for the same work, and the calls you never authorized are refused.
- torm115
Credential scoping handles the "what can the agent do" part, but after running a few agents on my own data for a while I think the harder problem is what they can see. Prompts turned out to be pretty much useless as a boundary there, so I ended up pushing all of it server-side. Is unyolo doing anything on the read side, or is it strictly about gating actions?
- TZubiri
> product about access control
> curl -fsSL https://unyolo.io/install.sh | sh