Security
FlockTab sits in front of spend: caps, policies and the ledger run in the proxy, not in the agent. Here is exactly where your prompts and keys go, hosted and self-hosted. A plain threat model, not a compliance brochure.
200 · passed through flocktab.com, nothing stored · $0.04 settled
200 · straight to the vendor · only the numbers went to flocktab.com
Run tab up and the proxy lives on your machine. Prompts, replies, provider keys and subscription logins go straight to the provider; flocktab.com only sees the model, token counts and cents it needs to keep the tab.
Provider keys are AES-256-GCM ciphertext at rest, opened only in the proxy, per call, with an unlock secret your agent sends and we never store. Prompts pass through in memory and are never stored or logged.
Agents hold an ft_live_ key, never your provider key. It is stored as a SHA-256 hash and shown once. Revoke is instant: every request checks it.
The ledger is integer cents in Postgres. If it cannot be reached, the call is refused before the provider. An agent is stopped, never left spending unmetered.
Close one tab or the whole flock and the next call is refused. A leaked virtual key can spend at most what is left on its tab.
Payments, sending email, deletes and production deploys are denied unless you allow them, and then only while $25.00 of the cap remains. A tool FlockTab does not know is treated as a write, not a read.
Each decision is recorded: agent, tool, cents, allowed or refused, and why. Prompt and reply bodies are never stored.
A retried request never opens a second upstream call against the same hold, so a retry storm cannot double-spend.
Passkeys and authenticator-app two-factor are free on every plan. Fleet adds SSO (OIDC or SAML), SCIM, roles checked on every request, and an audit log. The console cannot be framed by another site.
No SOC 2 report yet, no deployment in your own VPC, and no customer-managed encryption keys. Self-hosting the proxy is the answer we have today for keeping keys and prompts in your hands. Questions about any of this: hello@flocktab.com.
Setup, billing, a refusal you did not expect. A person answers.
