I Taught My Agent to Do the Part of My Job I Kept Skipping
I haven't manually updated a Salesforce record in weeks. Granola had every call, Salesforce had what I remembered, so I handed both to my agent.
How twins get their access, where the gateway sits, and what we learned shipping it.
I haven't manually updated a Salesforce record in weeks. Granola had every call, Salesforce had what I remembered, so I handed both to my agent.
Containers were enough until agents needed to run full stacks, drive browsers, and test against real providers. So every agent on Dittwo Cloud got its own micro-VM.
Dittwo now ships the agent, not just the layer that keeps it honest: one per employee, scoped passes instead of keys, and one control plane over all of them.
Dittwo is now available on the 1Password Marketplace. Vault credentials injected at request time, with runtime policy enforcement.
Agents reach services through CLIs, curl, and generated code, not just tool calls. Guardrails that only cover MCP miss most of that traffic.
Bitwarden launched their Agent Access SDK with native Dittwo support. Human-in-the-loop approval meets runtime policy enforcement.
NanoClaw adopted Dittwo Agent Vault for credential isolation across agent groups. What this means and why it matters.
An honest look at what Dittwo protects against, what it doesn't, and where it fits in a security stack.
The problem with secrets in AI agents, and how we're solving it.