Skip to Content

Export your organisation’s data

If you want an offline copy of your AgentValet state — for compliance, for a migration, for peace of mind — the danger zone has a single button that gives you everything.

How

/settingsDanger zone section → Export all data.

The dashboard generates a JSON file named:

agentvalet-export-<timestamp>.json

It downloads to your default browser download location.

What’s included

  • All agents (id, name, status, created_at, SPIFFE ID)
  • All platforms you have connected (id, display_name, status — no decrypted credentials)
  • All permissions (agent_id, platform_id, scopes, require_approval)
  • All approval delegates
  • Your Paperclip API key labels and IDs (not private keys)
  • Audit log within your plan’s retention window
  • All anomalies
  • All agent self-reports

The export respects your plan’s audit retention — Free plans only export the last 3 days of audit, Studio gets 30 days, etc.

What’s NOT included

  • Decrypted platform credentials. Those are AgentValet’s encrypted vault contents; export gives you metadata only.
  • Agent private keys. Those were delivered to you once at registration; AgentValet doesn’t store them.
  • Paperclip private keys. Same reason.

If you’re exporting to migrate off AgentValet, you’ll need to reconnect platforms and re-register agents on the destination — there’s no way to portably move encrypted secrets.

Frequency

There’s no daily / scheduled export — it’s an on-demand button. If you need regular automated exports for compliance, talk to us about the Enterprise plan; we can set up a cadence.

Why this is in the “danger zone”

Calling it dangerous is a bit strong, but the export file includes a complete picture of your account structure — agents, platforms, scopes, audit. Treat the file like a credential dump: keep it encrypted at rest, don’t email it casually, etc.

Next