Does an AI Agent Need Access to Your Stored Credentials?
No. A credential can be filled at the destination after a person approves the sign-in, so the model never holds it. Check where it becomes readable.
Research topic
non-human identities
Research on non-human identities: AI agent security, tokenization and checks for sensitive data access before allowing enterprise workflows to run.
How Do AI Agents End Up With Full Access to Sensitive Company Records?
By inheritance: an agent takes over a signed-in session, reads overshared data and runs under a broad service identity. Check which path each agent took.
What Happens When an AI Agent Can See API Keys in a Console or Settings Page?
The key becomes a secret copied into the model's context, the transcript and every log, which means rotation. Check that console keys are masked on screen.