Pigeon Python library for fine-grained sub-agent capability scoping
September 6, 2026
Pigeon enables the creation of signed, narrowed credentials for agentic sub-processes to prevent full API key exposure. Using a grant and verify pattern, developers can restrict sub-agents to specific actions and resources, such as staging-only deployments, with detailed denial reason codes.
HOW THIS AFFECTS YOU
●
builderYou can use this to implement principle of least privilege in multi-agent systems without passing full user credentials to child processes.