How It Works
How a Shroud Identity Works
From first request to full cleanup — here's what happens under the hood.
Human Approval
You set a budget and any limits. The agent is authorized to spend only within those bounds.
POST /v1/auth/provision
{ "grant_type": "identity_session", "limit": 20.00 }Orchestrator Requests
The agent calls the Shroud API to request a fresh identity — one that has never been used before.
Infrastructure Provisioning
A temporary email, phone number, and virtual card are created and ready in seconds.
Inbound
State
Node
Credential Delivery
The agent receives its credentials. Keys are rotated right away on delivery.
"email": "agent-12@shroud.temp",
"phone": "+1 (555) 012-9923"
Task Execution
The agent uses the temporary credentials to sign up, log in, or check out on the target platform.
Signal Interception
Shroud watches the inbox and phone number, then pulls out OTPs, verification codes, and magic links automatically.
Captured SMS
Your verification code is: 992-102
Context Resurrection
The extracted code is sent back to the agent so it can continue without any manual steps.
Financial Execution
Agent uses a virtual card with a pre-set merchant lock and exact balance to complete the transaction.
Atomic Destruction
Once the task is done, the card is canceled, the phone number is released, and the inbox is wiped. Nothing left behind.