Files
open-multi-agent/docs
Jack Chen fbc3116bff feat(agent): per-agent scoped tool credentials (#362)
Add AgentConfig.credentials, a per-agent secret bag threaded into
ToolUseContext.credentials. Tool code reads context.credentials?.KEY
instead of closing a shared secret over every tool, so each agent holds
only the credentials it was assigned; a compromised subagent can't reach
another agent's secrets. Per-agent bags flow through the existing config
spread, so no orchestrator changes are needed, and the coordinator (built
field-by-field) never receives user tool secrets.

Addresses the credential-scoping half of #19. Per-call risk gating stays
tracked in #96.
2026-07-10 22:10:31 +08:00
..