Codezero In Action
Below are two fully independent applications deployed to separate Vercel projects, shown side-by-side for comparison. Each runs a live billing dispute agent that queries customer and risk data from MCP servers backed by PostgreSQL, then calls the Anthropic API to analyze disputes and propose resolutions.
- ✗Long-lived static API key stored in environment variables, susceptible to credential sprawl
- ✗API key, even though encrypted at rest, becomes available in plaintext to the agent runtime, allowing exfiltration via Prompt Injection, Excessive Agency, and other attacks
- ✗No access provided to private network so MCP servers are exposed on the public internet
- ✓No API keys in the runtime environment — nothing to steal or sprawl
- ✓API key is injected at the network layer by Codezero, protected from exfiltration and never available to the agent runtime
- ✓Identity-aware access allows authenticated and authorized agents to reach private MCP servers with zero knowledge of other private services
- ✓Works just as easily for developers, CI/CD, and application runtimes
- ✓Deploys in minutes, not weeks
BEFORE: Without Codezero (insecure by default)
AFTER: With Codezero (secure by default)