You can now store a credential on your account once, hand it to the agents that need it, and have it available in their sessions. No screen and no API call reads the value back after you enter it, and revoking a grant takes effect on the agent's next session.
Sign-in by name. An agent logs into a site by naming a credential you stored, and the secret is typed into the field without ever appearing in the session transcript. Granting the credential is the whole setup. An agent that names a credential it was not granted is refused.
Two-factor codes. Store an authenticator seed in the keychain and an agent produces a current six-digit code from it when a login asks for one. The seed is never delivered anywhere, and every code minted is recorded against the agent and session that asked for it.
Redaction by reference. A command can echo an Authorization header, and a failed sign-in can print the body it sent. Wherever a granted value surfaces in a turn, Wallfacer replaces it with the credential's reference before the turn is written down, so one record reads [redacted:credential:KEYCHAIN_TRELLO] in the sandbox log, the session events, and the transcript.
Who can add one. Any member of the account can add a credential and grant it. An agent that signs up for a service during its own work saves that login to the keychain itself and reports it back to you by name.
OAuth for remote MCP servers. A remote MCP server that supports OAuth signs you in once, with no token to paste. Your agents call it during a session, and the sign-in is never copied onto the machine they run on. MCP servers covers the setup.
Start with one credential
Open the agent, go to Apps & access, expand Logins, and choose Add credential. Name it something you will recognize in a list, pick what you are saving (an API key, a login, a token, or the seed behind an authenticator app), and paste the value once.
The agent gets a reference derived from that name, so Mixpanel (read-only) becomes KEYCHAIN_MIXPANEL_READ_ONLY. That reference is what you write in a playbook, and it is what the agent names when it wants the value.