One account does not mean one credential
Each agent can have its own key. An owner can end one agent’s access without rotating the credentials used by every other workflow.
This is the practical meaning of control: independent lines into one account, rather than one account-wide secret copied into every tool.
What each boundary does
| Boundary | What it limits | When it matters |
|---|---|---|
| Account balance | The total prepaid amount available | All agents together reach the funded line |
| Revocation | Whether this credential may act at all | A task ends or a credential may be compromised |
Secrets do not travel through URLs
The key is a Bearer credential supplied in the request header. It is shown once when issued; the platform stores only its hash. Pagination uses opaque cursors rather than prepared URLs containing credentials.
Revocation has a named result
A revoked key does not become a generic invalid credential immediately. It returns key_revoked, allowing the agent to stop and treat the event as deliberate rather than retrying blindly.