7 ms·
Makes sense — handing full API keys to agents is a huge risk surface. Even with fake UUIDs at MVP stage, the scoped/expiring pattern seems useful. Curious if yo
by skyzouwdev 1y ago
Makes sense — handing full API keys to agents is a huge risk surface.
Even with fake UUIDs at MVP stage, the scoped/expiring pattern seems useful. Curious if you’ve thought about integrating with existing secrets managers (Vault, Doppler, etc.) instead of rolling custom crypto later on.
- lexokoh 1y agoThank you. Yes, it's one of the things I'm already looking into. So will work well with any Secrets manager, not compete with them. Curious if you'd want to use it?