canonical: https://jentic.com/jentic-one

# Connect Your Agent to Any API

Jentic One is a self-hosted execution layer for AI agents: your agent calls any public or private API you need, you set the rules, and it never sees your credentials.

## Four Things Jentic One Handles

- One Connection Path: Install once, add any API from the Jentic API Directory, and store each credential once. No hardcoded integrations per API, region-picking, or retry plumbing by hand.
- Permission Scoping: Write rules that bound an agent to the operations it needs, and nothing else. How granular this gets depends on the API. Writes are never allowed by default.
- Credential Handling: Credentials are stored once, encrypted, by your own Jentic One instance and injected at execution time. They never enter the agent's prompt, logs, or context.
- Discovery by Intent: Agents find what they need by intent, like "send a webhook" or "create an invoice", and get the right operation with its input schema.

## Install and Connect

Jentic One is a server your agents connect to as clients. Install it once on a machine you control, check the agent can reach it, then register each agent from wherever it runs — never on the instance’s own machine, where a local process could read the stored keys directly.

- stand up the server: On the machine that will host your instance. A setup wizard stands up the server, in Docker or a plain Python environment, your choice.
- reach it from the agent side: The instance is a normal HTTP server. From wherever your agent runs, check you can reach it before wiring anything.
- register the agent: Where your agent runs, kept off the instance’s machine so it can never read the stored keys. Install the CLIs only (no server wizard), then give the agent its own identity.

## Built for Security From the Start

- **Self-hosted.** — Runs on your own infrastructure; credentials stay local.
- **Open source, Apache-2.0.** — Public repo on GitHub.
- **Encrypted at rest.** — AES-256-GCM, injected only at execution time.
- **Two-machine design.** — The agent cannot read the instance's stored credentials directly.
- **Every call is logged.** — An audit trail of what the agent did.
- **Backed by the Jentic API Directory.** — Thousands of validated OpenAPI specs to search and call.