You store keys in your secure Piper vault. The agent requests access via our Python SDK (pip install pyper-sdk). The SDK handles vending (temp tokens preferred) with fallbacks to ENV/local files if Piper isn't used.

Key SDK Features (v0.7.1):

Smart user guidance: If a secret can't be fetched, the SDK provides clear, actionable advice through the agent/MCP's chat interface, including deep links for you to fix permissions (e.g., grant a missing API key in Piper).

Graceful startup: Agents start and operate even if initial user keys are missing or not configured.

Dynamic permission re-validation: The SDK tracks permission changes made in Piper, allowing you to fix access and retry without an agent restart. Or revoke access with a click.

Dealing with user API keys in Python AI agents & MCPs is a pain. Users don't want to paste keys everywhere, and developers don't want to handle them directly.

We're aiming for a much smoother and more secure experience for both users and developers. SDK GitHub: https://github.com/greylab0/piper-python-sdk Piper: https://agentpiper.com/

What are your thoughts on this approach? Feedback welcome!