Cred

Open-source OAuth delegation that gives agents short-lived tokens while refresh tokens stay locked

Aboutcred.ninja

Cred is credential delegation middleware for AI agents. When an agent needs a user's Google Calendar, Slack, or GitHub, Cred checks the agent's identity and the user's consent, then returns a short-lived token. Refresh tokens never reach the agent. It is open source, self-hosted, and works with your existing auth provider.

Install

npm install @credninja/sdk

For an agent

Use it when agents must act in user accounts without holding long-lived credentials. Test token expiry with your real providers.

Why it is here. It addresses a key security gap in agent integrations.

Install command, framework, licence and component list.

Notable for

Short-lived tokens
Consent checks
Self-hosted

Provenance

Verified 2026-10-09. HTTP 200. https://www.cred.ninja/ (HTTP 200, page fetched 2026-10-09), https://github.com/cred-ninja/sdk (GitHub API, 21 stars), depo.zip listing https://www.depo.zip/tools/j57br2z20f20m4daey2mna8xx182z1z9

Utilities & Naming