Alter

Alter Vault is privileged access management for AI agents, enforced at runtime. It sits in the path of each request an agent makes: credentials are stored once in a vault and injected per request, every action is checked against policy, risky calls wait for human approval before they complete, and each call is recorded in a tamper evident audit trail naming the agent, the user it acted for, the policy applied and who approved it. It serves teams building agents that act on behalf of their customers and security teams governing agents internally. Each agent gets its own identity and scoped grants instead of a shared, over scoped key. Policy is default deny down to the parameter, and an agent, key or grant can be revoked instantly, with identity provider webhooks cascading offboarding. Audit logs can be streamed to a SIEM for security reviews. One SDK call handles credential storage, token refresh, policy and audit for 138 provider integrations, with first class LangChain, MCP and AWS support. The company is backed by Y Combinator, and its SOC 2 audit is in progress. Free includes 10,000 API calls per month, unlimited users, agents and apps, every feature except custom branding, 30 days of audit log retention and community support; calls are blocked at the limit. Starter is $50 per month for 100,000 calls, Growth is $250 per month for 1,000,000 calls, and both charge $0.50 per 1,000 additional calls, with unlimited retention, custom branding and a dedicated Slack channel; Growth adds dedicated support and an SLA. Enterprise is custom with an annual commitment. Each completed provider request through the proxy counts as one call, while SDK management calls do not.