Signing in
AgentValet’s dashboard authentication is handled by a dedicated sign-in provider. When you sign up or log in, you’re going through its hosted flow.
Sign-in methods
- Email + password — the default
- GitHub — one-click social sign-in
- Passkey (WebAuthn) — available for action approval; dashboard sign-in via passkey is in the pipeline but not yet enabled
If you forget your password, the Forgot password? link on the sign-in form sends a one-time code to your registered email. No password reset wait.
What signing in actually does
When you sign in, the sign-in provider issues two JWTs:
- A standard session JWT — used by the dashboard to fetch your data, scoped to your account by row-level security
- A second JWT signed against AgentValet’s proxy — used when the dashboard calls the proxy on your behalf (e.g., to approve a queued action)
Both expire on a short rotation. You don’t need to think about either; the dashboard refreshes them in the background.
Multiple devices
You can be signed in on as many devices as you like. The dashboard works on any modern browser, plus a touch-optimised view at /m/* for mobile approvals. Push notifications register per-device when you grant permission on each one.
SSO and SCIM
Single sign-on is available: once your org’s email domain is verified, anyone signing in with that domain is routed straight into your org as a member, no invite needed. It’s admin-managed, new SSO users land without self-registration rights until an admin grants them.
SCIM user provisioning (automated user lifecycle sync from your identity provider) is still on the roadmap.
If you want SSO enabled for your org, get in touch and we’ll set it up with you.
Signing out
The user menu in the dashboard top-right has a sign-out option. It clears your session everywhere, so other devices will be signed out on their next request. Your agents are unaffected — they sign with their own keys, not your session.