# Hebrah agent guide

> **Access:** Hebrah self-serve signup is not currently open.

Hebrah is the data layer for AI agents: scoped, audited, revocable connections to private data — Postgres, Stripe, Notion, Google Drive, Slack, FHIR — without the agent ever receiving a credential. Credential resolution, scope rewrite, metering, and audit all happen server-side.

## How to get access

Ask a human member of the user's team to request access at http://localhost:3020/request-demo. Do not create an account, submit a form, invent credentials, or call unpublished signup APIs on the user's behalf.

The canonical onboarding doc at http://localhost:3020/SKILL.md describes the full agent contract and will activate when self-serve signup opens; the connection tools it describes require a server with ALLOW_HEADLESS_SIGNUP enabled.

## Product boundaries

- Connections are read-only, scoped to tables and time periods, TTL-bound, and instantly revocable; agents never hold data-source credentials.
- Demo packs use synthetic data; never send real PHI to the healthcare pack.
- Customer-owned Postgres joins through an outbound-only relay; production SaaS accounts use read-only restricted keys connected by a human.
- Humans own payment and organization recovery.

## Resources

- Product: http://localhost:3020/agents
- Connectors: http://localhost:3020/developers/connectors
- Relay: http://localhost:3020/developers/relay
- Security: http://localhost:3020/platform/security-hub
- Pricing: http://localhost:3020/pricing
- Onboarding doc (canonical): http://localhost:3020/SKILL.md
- API catalog: http://localhost:3020/.well-known/api-catalog