One login reaches every client. Your agents shouldn't.
Accounting firms, IT providers and agencies often hold one login that reaches every client. Alter lets your agents use that access one client at a time: each agent reaches only the client it is working for, changes wait for approval, and every call is recorded.
The access you already hold was built for people. An accountant's login opens every client file, and an IT provider's admin access reaches every tenant. That works when a person decides what to do in each one. Once agents do the work, and you run dozens or hundreds of them, the same login lets any agent reach any client, and one mistaken or manipulated call can land in the wrong client's books.
Most firms that hit this start building a credential broker of their own: something that holds the keys, splits access by client, and asks a person before anything changes. Alter is that broker, ready to use.
How Alter splits the access
One client per agent
Connect each client's systems once, for example one QuickBooks Online connection per company file. Give each client its own agent, and that agent can only use the connections of the client it works for.
Each run gets only what it needs
An agent can pass a narrower slice of its access to a run or a sub-agent, limited to specific operations and with an expiry. Delegated access can only narrow, never widen.
Changes wait for a person
A policy can hold any write, such as a journal entry or a tenant change, for a named approver. It runs only after approval.
Limit what a broad key can do
Some systems issue one key with access to all of a client's data, which is common with point-of-sale and practice software. Alter rules can limit each request by endpoint, method and query parameters, so an agent reaches only what its task allows, even when the key itself would allow more.
- Rules on endpoint, method and query parameters
- Default deny: anything not allowed is refused
- Every decision, allowed or not, is recorded
A record for every client
Every credential use, policy decision and provider call is written to an append-only audit trail with the agent that made it. Give each client its own agent and you can show any client exactly what was done in their accounts.
Works with your systems and your agents
Built-in connections for QuickBooks Online, Xero, Microsoft 365, Google Workspace and 140+ services in all, plus any API-based tool as a custom integration. Use the Python or TypeScript SDK, the alter CLI, or the open-source OpenClaw plugin. Your access rules live in Alter, so they carry over if you change how your agents run.
What Alter does not cover
Alter governs the calls your agents make to APIs. It does not control an agent clicking through a website or desktop app, so keep those steps with a person or outside the agent.
Keep reading
Put your agents under privileged access control.
Book a 30-minute walkthrough with the founders.