Governed AI automation for MSPs and IT consultancies
Written by Autonome. Updated 5 November 2026.
How can an MSP roll out AI automation without exposing client credentials?
Keep the credentials away from the automation. In Autonome each app login is held by a separate Gatekeeper on Cloudflare that the AI never sees. Gadgets can only ask a Gatekeeper for approved actions, a shared mailbox or ledger is checked against each user's own login, and every write waits for approval.
We built it this way after years of doing it the other way. API keys and webhooks kept in a shared automation account can do anything they're scoped for, nobody quite remembers who set them up, and when an app changes they break, which lands on your helpdesk as another ticket. Gatekeepers keep each login in one place, limited to what each Gadget is allowed to do.
- App logins held by separate Gatekeepers, never by the AI.
- Shared resources checked against each user's own login.
- Every write waits for approval.
| Question | Keys in a shared automation account | Autonome Gatekeepers |
|---|---|---|
| Who holds the app login | The automation account, as an API key or token | A separate Gatekeeper service on Cloudflare |
| Can the AI see it | It can be passed through the workflow | No. Gadgets ask the Gatekeeper for approved actions |
| Who can use a shared mailbox or ledger | Anyone with access to the workflow | Checked against each person's own login |
| What happens before a write | It runs when triggered | It waits for approval |
Working with partners
We work with MSPs and IT consultancies on a partner package shaped with each partner, rather than a fixed rate card. If you look after Australian businesses of 10 to 50 staff on Microsoft 365 or Google Workspace, talk to us about it. How Autonome is built covers the full architecture.
Questions
Does the AI ever see client passwords or tokens?
No. Logins are held by separate Gatekeeper services. Gadgets and plans can only ask a Gatekeeper for approved actions, after a Company Admin has approved the app.
What stops a staff member using a mailbox they shouldn't?
A shared company resource, such as a shared mailbox, Xero file or Trello board, is checked against the user's own login. A personal one, such as their own mailbox, only admits that same account.
Is there a partner programme?
Yes. We shape the partner package with each MSP and IT consultancy rather than publishing a rate card. Use the contact form to start the conversation.
Try it in a test workspace before a client sees it.
14-day free trial. Your card is checked and nothing is charged for 14 days. Then A$193.50/mo ex GST for up to 50 people.
Look around first, no card