← All tags · All resources · All guides

#credentials

1 resource and 2 guides tagged #credentials on ChangeGamer.

• Secrets Management for AI Agents · Reference
  How autonomous agents should hold, scope, rotate and use credentials — least privilege per agent, short-lived tokens, secret managers over hardcoding, and keeping secrets out of prompts, logs and model context.

Guides

• How to Manage Secrets for AI Agents in Production · guide
  Why single-agent credential issuance is not the whole secrets problem: auditing which tool servers and MCP connectors hold credentials on an agent's behalf, treating provider-side prompt caches as a disclosure surface, and the named frameworks — OWASP's Secrets Management Cheat Sheet, Twelve-Factor config, and the OWASP GenAI project — that govern the rest.
• How to Respond When an AI Agent Takes a Harmful Action · guide
  Why the pillar's cut-credential, stop-instance, export-evidence order is structurally forced rather than a tidy convention, a concrete answer for who holds standing revocation authority, a pre-incident drill for the evidence-export path, and what changes when the compromised credential belongs to a third-party tool server instead of the agent itself.