give your agent the info it needs.
not your whole life story.
Decoy lets your agent manage logins, handle their email and securely save information you want it to remember. You choose what it can access.
you choose which accounts and details to share, and how long access lasts.
connect your agent
paste to connect your Decoy account.
one task shouldn’t need your whole inbox.
a code for one sign-in. a login for one account. share what the job calls for.
Access to your whole inbox
A broad email grant can allow:
- read every message in the connected inbox
- send and delete email
- keep access until you remove it
help your agent get things done.
from signing in to filling in your details, you decide what your agent can use.
passwords
share the login for an account you choose.
email and 2fa
let your agent get a sign-in code or use a separate email address.
passkeys
approve a sign-in on your phone. keep the private key there.
autofill
share the name, address, phone number or card a form needs.
see what you’ve shared. stay in control.
clear before the task. reviewable after it.
review your agent’s activity and manage its access in Decoy.
what your agent can do with decoy.
sign into a website
use an approved password or passkey.
complete 2FA
read an emailed code or generate a live TOTP.
finish checkout
use an approved name, address and card.
read and reply to email
use a service-specific inbox without connecting Gmail.
before you connect.
download Decoy, create your account in the app, then choose what to share with your agent.
You approve which accounts and information a connection can use, and for how long. Stored vault values are encrypted; approved values are decrypted in the agent’s runtime. Decoy cannot read those values; your agent and its provider can. You can review activity and revoke future access.
your agent gets to work. you stay in control.
start with the accounts and details you want to share.