AgentSessions

Scope MCP and tool access per end user

Revocable MCP sessions — identity and policy travel with every call.

audit log$250 cap
  • 10:14cards.createAllowed
  • 10:19email.sendAllowed
  • 10:22payment.chargeAllowed
  • 10:23payment.chargeRevoked
  • 10:31formation.submitAllowed
  • 10:38trading.orderRevoked
  • 10:44vault.revealAllowed

Paste and ship

Drop this into Cursor, Claude Code, or any agent. It reads the skill manifest and wires up Sessions for you.

Agent prompt

Read https://usenaive.ai/skill.md and use the Naïve Sessions primitive in my project. Start with: POST /v1/users/{user_id}/sessions (REST — no CLI command yet)

What you get

MCP transportSSE endpoint per scoped session.
Tool allow-listsOnly permitted primitives per user.
Zero standing accessNo shared keys across tenants.
Kill mid-flightRevoke sessions while agents are running.

One call to AgentSessions

CLI, SDK, or REST — one bearer token, one credit balance.

POST /v1/users/{user_id}/sessions

Sessions

Hand agents a scoped tool surface per end user without sharing your master API key. Kill any session instantly; allow-lists enforced at the transport layer, including MCP and delegation chains.

MCP transport
SSE endpoint per scoped session.
Tool allow-lists
Only permitted primitives per user.
Zero standing access
No shared keys across tenants.
Kill mid-flight
Revoke sessions while agents are running.
# No CLI command for this primitive — call it over HTTP
$ curl -X POST https://api.usenaive.ai/v1/users/{user_id}/sessions \
    -H "Authorization: Bearer $NAIVE_API_KEY"

Start building with AgentSessions

One API key. One credit balance. Every primitive.