SECURITY
Your keys never enter the workspace.
The agent works in a shell it controls. So nothing in that shell is a key worth taking.
KEYHOW IT'S USEDIN THE WORKSPACE
Model keysGo through a proxy. Every request is checked.IN THE WORKSPACEa placeholder
Git tokensFilled in for each operation.IN THE WORKSPACEnever written to disk
MCP credentialsHeld by smedja.IN THE WORKSPACEnot in the workspace
WHEN SOMEONE LEAVES
Leave a project and its keys stop working for you within a minute.
WHO SEES WHAT
People in a project can see each other's work. Only the person running a workspace can drive it.