Company vault
Manage API keys, OAuth accounts, and internal services in one inventory.
Product / Switchboard
Company tools & app-to-app access
Connect company tools once. Let every app use them safely.
Connect HubSpot, Slack, an internal service, or another Tarantula app once. Each app gets only the tools and data it needs; raw credentials stay in the company vault.
company vault healthy
TARANTULA / SWITCHBOARDHubSpot
01Connected by Maya
02accounts.read only
03Granted to renewal-board
RESULTRaw credential never exposed
What is included
Useful defaults, ready in production.
Scoped grants
Limit access by app, action, resource, environment, and time.
Typed tool grants
Apps call explicit tools and can expose approved tools to other apps without passing credentials.
Rotation & ledger
Rotate or revoke access and trace the human, app, delegated scope, tool call, and external action.
Declared with the app
The app declares a capability, not a credential.
The coding agent declares the resource beside the app. Local development and production use the same binding and permission contract.
tarantula.tsSwitchboard
import { connection } from "tarantula";
export const hubspot = connection({
provider: "hubspot",
grants: ["accounts.read"],
environment: "production"
});Validated locally · ready to deploy
Small-cloud defaults
01No copied .env keys
02No OAuth setup per app
03No untraceable delegation
Private alpha