Overview
Give coding agents access to approved services without exposing secret values
Stashbase can run coding agents with the credentials they need without passing secret values into the agent's process environment. The agent receives short-lived placeholders instead. Stashbase exchanges a placeholder for its secret only when the agent makes a supported HTTP(S) request to that secret's approved destination.
Agent profiles are early access and reduce local credential exposure during normal workflows. They do not isolate a malicious process running as the same user. Review a repository's profile before granting it secrets.
Continue in Agents
The Agents guide covers setup, profile configuration, audit logs, supported tools, and the security boundary.