1Password

Bitwarden is an open-source password manager for individuals, teams, and enterprises. It stores, shares, and manages passwords, passkeys, and other secrets, and can generate random secrets such as the one used in the video’s Euro Office configuration.

Pocket ID is a self-hosted OpenID Connect and OAuth 2.0 identity provider that authenticates users with passkeys instead of passwords. It provides group-based access control, LDAP integration, SCIM provisioning, audit logs, a REST API for administration, and resource-specific OAuth tokens with configurable scopes. Applications and APIs can use Pocket ID for passwordless sign-in, while compatible AI applications and remote MCP servers can use it as an OAuth provider.

jit is a local-first macOS command-line secrets manager from jitpass that moves development credentials from plaintext files such as .env, AWS credentials, shell exports, npm configuration, and MCP configurations into an encrypted vault protected by Touch ID. It rewrites source files with decoys so existing tools can continue working while the real value is released only to an authorized process. It provides credentials through per-process environment injection, native credential protocols such as AWS credential_process and Docker or Git credential helpers, and a named-pipe mount for tools that only read files. The named pipe is a mode-0600 POSIX FIFO: authorized reads receive decrypted values through the kernel pipe buffer without writing them to disk, while ambient readers receive decoys. jit is macOS-only for Apple Silicon and is still in development; the project states that it does not protect credentials after they enter the requesting process's memory.

Keycloak is an open-source identity and access management system for applications and services. It provides user federation, strong authentication, user management, fine-grained authorization, and support for identity protocols including OpenID Connect and SAML; in the described agent-security context, agents can be registered as OAuth2 clients. The project can be run from its distribution or Docker image and is licensed under the Apache License 2.0.

Paperclip is an open-source, self-hosted control plane for organizing and running teams of AI agents. Its Node.js server and React UI let users define company goals, assign agents roles and tasks, and monitor work, budgets, approvals, costs, and audit activity from a shared dashboard. Agents run through scheduled or event-based heartbeats. The system maintains organization charts, goal ancestry, task dependencies, persistent session state, isolated workspaces, scoped secrets, runtime skill injection, and atomic task checkout with budget enforcement. It supports agent adapters and runtimes including Claude Code, Codex, Cursor, Bash, HTTP/webhook agents, and plugins; recurring routines can create tracked issues and wake assigned agents. Paperclip supports multiple isolated companies in one deployment, governance and approval gates, cost hard stops, agent pause/resume/termination, company export and import with secret scrubbing, and optional OpenTelemetry and Sentry integrations. It can be installed through the Paperclip CLI or run from source; local setups use embedded PostgreSQL and file storage, while production deployments can use an external PostgreSQL database. The project is distributed under the MIT license.