Connections and the contract vault

How an agent reaches your accounts without ever holding your passwords.

Each contract gets its own vault and its own encryption key. Connections you add are stored only there and are used only for that contract.

Prefer partner access when the platform offers it: you grant a role, and nothing secret is stored. A key or token you give us is encrypted at once and only decrypted, for one request at a time, by the Credential Broker.

The agent never sees a secret: it only knows that a connection exists and which actions it allows.