Connecting a personal assistant

Some assistants, such as Instinct on WhatsApp, can’t add custom MCP servers but can run code and make HTTPS requests. They connect to AgentValet over REST, from a prompt you paste into their chat.

1. In AgentValet, open Agents > Connect an assistant (or Connect an assistant on your phone) and pick the assistant.
2. Copy the generated prompt and paste it into the assistant’s chat as one message.
3. The assistant generates its own RSA key pair, keeps the private key, and registers with POST /v1/register. It sends you an approval link and a key fingerprint in chat.
4. Open the link. Check that the fingerprint on the page matches the one in chat, then approve with your passkey (face, fingerprint or device PIN).
5. The assistant confirms what it can now do. When you ask it for a new platform, it asks AgentValet, sends you another approval link, and you approve that with your passkey too.

What the prompt contains

Only a pairing code (pc_…):

• Single use. A second registration with the same code is refused and you are notified.
• Short-lived. It expires 15 minutes after you generate it.
• Bound to you. It identifies your account, so the prompt carries no account id.
• Grants nothing. Registering with it creates a pending request. Nothing happens until you approve with your passkey.

Assume anything you paste into an assistant’s chat is stored by its vendor. The prompt holds no key, token or password. The assistant’s private key never leaves the assistant, and it signs a fresh token, valid for 60 seconds, for every request. AgentValet refuses tokens from assistant agents that would live longer than five minutes, so there is nothing long-lived for the vendor to keep.

Why a leaked prompt is worthless

• The code works once and expires in 15 minutes.
• If someone else uses it first, their registration shows a different key fingerprint from the one your assistant told you. Reject it.
• Approving always needs your passkey. A link, an email or a tap on a notification only opens the approval page. Your assistant can read your email, so nothing in your inbox can approve anything.

Approvals

Every approval, whether for registering an agent, granting a platform or a scope, or running an action, needs your passkey. On first use you set one up for app.agentvalet.ai. It syncs with your phone’s password manager, so the same passkey works in the browser and in the installed app.

Your assistant’s own connectors

Assistants often have built-in connectors, and Instinct also has a cloud browser with saved logins. The prompt tells the assistant to use AgentValet for every platform AgentValet lists. AgentValet can’t see or govern anything the assistant does through its own connectors or browser: those actions skip your approvals and the audit log.

Supported assistants

Audit

If you ask your assistant for an audit or history, it sends you a link to your AgentValet audit log for that agent. The assistant never receives your log contents.