SECURITY

Your keys never enter the workspace.

The agent works in a shell it controls. So nothing in that shell is a key worth taking.

Model keysGo through a proxy. Every request is checked.IN THE WORKSPACEa placeholder
Git tokensFilled in for each operation.IN THE WORKSPACEnever written to disk
MCP credentialsHeld by smedja.IN THE WORKSPACEnot in the workspace
WHEN SOMEONE LEAVES

Leave a project and its keys stop working for you within a minute.

WHO SEES WHAT

People in a project can see each other's work. Only the person running a workspace can drive it.

Run your agent without handing it your keys.