I built an infrastructure layer so SaaS products work the same for humans and AI agents — need product feedbacks

Most agent-to-SaaS integrations today are either raw API calls with no scoping, or MCP servers that are stateless and have no real consent model for side-effect actions.

Built Duct to give agents a proper action surface: scoped tokens, manifest-declared side effects, per-call consent for destructive actions. The agent calls an Invoke API; Duct validates against the manifest and proxies to the product's existing API.

Curious if this maps to problems people have actually hit building agents.

​

Site in comments