# Your agent never holds the key

My agent runs shell commands all day: it greps logs, calls APIs, writes code. Everything it reads gets echoed into a transcript, and everything it types gets logged. That’s a bad place to keep a real credential. So I set kaibot up so the agent resolves what it needs at runtime and never once holds the value in a place it could print.

This page is a hand-designed HTML document, not markdown. Read the full text at https://bootstrapping.io/notes/your-agent-never-holds-the-key/