Security
Protect credentials, callbacks, tools, and public output.
Protect secrets
Keep credentials server-side. Never place API keys in public output, browser bundles, chat, callback URLs, logs, or screenshots.
Validate callbacks and input
Use HTTPS, authenticate requests, enforce schemas and size limits, reject replayed intents, and isolate untrusted audience content from tools.
Limit Agent authority
Grant only the tools and data needed for the channel. Require human approval for destructive, financial, privacy-sensitive, or external communication actions.