hn · HN · 10-21 06:42 51 分 ← 返回列表

Launch HN: Alter (YC S25) – Access control for multi-user agents

Hi HN! We’re Srikar and Kevan, founders of Alter – https://alterauth.com/ . We’re building access control for agents that can take actions on behalf of multiple users. If you’ve built an internal agent people use through Slack, you may have experienced this scenario: everyone signs in with their own account, but the agent connects to the CRM or billing system with one shared API key, so the agent can do anything that the key can do. User-level authentication in Slack does nothing to control wha

五维评分

付费意愿

需求真实度

个人可落地

竞争空间

新鲜度

AI 分析

痛点：多用户 AI Agent 使用共享 API key 访问外部系统，无法按终端用户身份做细粒度权限控制和审计，受监管行业自建鉴权成本过高。

目标用户：构建 Slack/内部多用户 AI Agent 的开发者与团队，尤其是金融、医疗等受监管行业和多租户 SaaS 公司。

证据：everyone signs in with their own account, but the agent connects to the CRM or billing system with one shared API key, so the agent can do anything that the key can do. ... prohibitively expensive it was for me as a developer to write my own custom auth to enable multi-tenancy in agents and to allow agents to have strict policy controls as they act on behalf of end users.

变现：按 Agent 数量/连接数/API 调用量收费，审计日志与合规模块作为高价企业版；可提供开源自托管核心加托管代理服务。

MVP：两周内做一个窄场景 MVP：Slack 机器人代理层，为每个终端用户映射独立 OAuth token，只接一个 CRM（如 HubSpot），提供按用户身份的读写权限模板和操作审计日志，不做完整企业级策略引擎。

竞品：Alter、Auth0/Okta、Oso、Cerbos、OpenFGA、Permit.io

摘要：Alter（YC S25）在 HN 发布面向多用户 AI Agent 的访问控制产品，解决 Slack 等内部 Agent 使用共享 API key 导致越权的问题，提供代理凭证、运行时策略和审计日志。帖子提到在 Goldman 开发自定义多租户 Agent 鉴权成本过高，说明受监管行业存在真实痛点；但 HN 热度仅 7 分 6 评论，且已有 YC 公司和成熟授权厂商竞争。