Overview
Use the CLI to run agents with scoped Agent Proxy credentials
stashbase agent run launches an agent through a local HTTP(S) Agent Proxy. The agent receives placeholders instead of secret values. When it sends a placeholder in an approved request header, Stashbase injects the matching secret only when the request matches that credential's host, method, and path policy. A binding without rules retains the legacy host-only behavior.
The complete Agents guide covers profile configuration, compatibility, audit logs, and the security boundary.