You hold the keys.
Your passwords and API keys live in Crisper, never with your agents. An agent asks; Crisper checks the request and makes the call with the key. The agent never sees it.
- Each key is granted per agent and per app
- Checked on every call: who, what and whether the job is still running
- Encrypted, and never shown again once saved





