Decisions0
Create your account
One account, as many API keys as you have apps. Each key is a project; its panel shows every decision your middleware made and how many of your sessions had an AI agent in them.
Already have an account? Sign in
One account, as many API keys as you have apps. Each key is a project; its panel shows every decision your middleware made and how many of your sessions had an AI agent in them.
Already have an account? Sign in
What your middleware reported, across every key in this workspace.
Create and manage your API keys. One key per project; the raw key is shown once.
| Key | Environment | Status | Expires | Last used | Decisions | Agent share |
|---|
Per key: the share of sessions with an agent, decisions over time, agents seen, resources reached, and the live log.
Put this key into your server and make one request to a protected endpoint. The panel updates on its own.
Or test from the terminal:
The last 7 days against the 7 before, and what changed in the AI agents themselves. Written to forward to your security lead.
Decide what an AI agent may do with each part of your app, without writing code. The result is the policy file your server reads.
Start here. Every decision is recorded in Activity, nobody is blocked. Switch to Enforce when the numbers look right.
Save it as nanotarget.policy.json next to your server. It takes effect on the next restart, or at once if you call nt.reloadPolicy(). Nothing changes for your users until a rule says so.
Three lines on the server, one tag on the page. Pick a key and copy — or let your coding agent do the whole thing.
Runs from your own machine against your own app: it asks for a protected endpoint the way an agent would, and the decision appears above within seconds. We never send traffic to your site.
npx nanotarget verify https://app.yourcompany.com /api/balance
npm i nanotarget
One package — the engine (nanotarget-engine) is installed with it. Node ≥ 22.13.
The key is shown here only while this page is open; it is never stored in the portal after creation.
Your account, management keys and appearance.
A management key administers this account over HTTP: create and revoke project keys, read usage. Give one to your coding agent or your CI and it can set NanoTarget up without anybody opening this portal. Treat it like a password — it can create keys.
Your e-mail and a scrypt hash of your password. For each key: its name, prefix, environment, expiry and a SHA-256 hash. For each decision your middleware reports: a hash of the session id, resource name, decision, actor, connection state, detected tool names and reason codes. Nothing else — no payloads, no identities, no IPs.
Copy it now — it is shown once. We only keep a hash.
Can create and revoke project keys and read usage for this account.
Copy it now — it is shown once.
Copy it now — it is shown once. The old secret already stops working; deploy this one.