Notes on the tools.

Secrets: Give the Agent a Token Without Giving It to the Model

Start with one masked paste, use the credential through a placeholder, then add names, scopes, lifetimes, environment imports, auditing, and repair when you need them.