> "Oh no it's a long lived token that's bad" > Put it in a secret manager like 1pw cli and now start an agent... And when the agent does something stupid, you

> "Oh no it's a long lived token that's bad" > Put it in a secret manager like 1pw cli and now start an agent... And when the agent does something stupid, your long lived token is compromised. It also makes it hard to segregate access (e.g. all those "Cursor deleted by production DB and all its backups because it had an API key that could do that"). Nope, you should instead use something that give short-lived tokens, ideally ones scoped based on the desired intent / operation. Or even better, skip the "agent gets a token" part at all, and have all agent operations pass through a gateway/agent/proxy/whatever that handles that part. That way even if the agent gets comrpomised or does something dumb, it doesn't have even a short lived token to give away.