Private beta · Select partners only

Your agents act
beyond their mandate.

Tenuo issues task-scoped warrants that narrow as agents delegate.

Request Early Access GitHub ↗
SCOPE

Task-level authority

Each agent gets a warrant for its task. Specific tools, specific arguments, bounded lifetime. Bound to the holder's key, useless if stolen.

DELEGATE

Authority only narrows

No derived warrant can exceed its parent. Every delegation hop is cryptographically chained to the one before it.

VERIFY

Every hop is auditable

The full chain is signed and verifiable offline in under 50 µs. Who authorized what, at which hop, with what constraints.

Warrants narrow at every hop

No child warrant can exceed its parent. Enforced cryptographically.

12 capabilities · ttl 1h query_db · search_kb read_file · draft_response query_db · /customers/* · 60s read_file · /templates/* · 60s User Orchestrator Research Agent Writer Agent DB Worker File Worker Signed at every hop. Full warrant chain verifiable offline.
Warrant — research task query_db /customers/* 300s
✓ query_db /customers/acme 200
✗ query_db /billing/inv path
✗ send_email ceo@acme no tool
Warrant — analytics task query_db /billing/* 120s
✓ query_db /billing/inv 200
✗ query_db /customers/acme path
✗ delete_row /billing/old no tool
Warrant — expired query_db /billing/* 0s
✗ query_db /billing/inv expired
✗ query_db /billing/reports expired

Drop-in for your stack

CrewAI LangChain LangGraph Temporal OpenAI SDK Google ADK AutoGen MCP A2A Kubernetes

Tenuo in the Wild

External mentions, write-ups, and recognition.

Case study
Wiring capability warrants into autonomous agents
Brooks McMillin · Staff Engineer, Dropbox

End-to-end warrant gating for MCP tool calls on Kubernetes, with Tenuo Cloud handling trigger minting and cross-cluster audit. Scope-gated rollout across 16 agents, multi-hop delegation at depth 2 and 3, and a live prompt injection the warrant catches.
Standards
draft-niyikiza-oauth-attenuating-agent-tokens-00
IETF OAuth Working Group

Individual Internet-Draft published in the IETF OAuth Working Group defining Attenuating Authorization Tokens for agentic delegation chains. Tenuo is the canonical reference implementation.
See all mentions →

Rust core. Open source. Ready for your pipeline.
Talk to us about your deployment