Skip to content

docs(security): explain how agents ask for credentials in chat - #63

Merged
mrgoonie merged 2 commits into
mainfrom
claude/dazzling-archimedes-toxval
Oct 27, 2026
Merged

mrgoonie merged 2 commits into
mainfrom
claude/dazzling-archimedes-toxval

Conversation

@mrgoonie

@mrgoonie mrgoonie commented Oct 27, 2026 •

Copy link
Copy Markdown
Contributor

This adds a short section to the security docs (en/vi) on how an agent asks for a credential.

  • In the console chat the agent shows a form. On a chat app it sends a single-use link to the form instead, valid for 24 hours. The value goes straight to encrypted storage.
  • A request made from a group or thread is sent only to the requester's direct messages, never to the group. This works on Telegram, Discord and Slack.
  • If that direct message fails, the request is cancelled and the link revoked.
  • Scheduled and other automatic runs never send a link on a chat app.

This matches the behavior shipped in nextlevelbuilder/dewee#1777, for nextlevelbuilder/dewee#1760.

🤖 Generated with Claude Code

https://claude.ai/code/session_01FL32rwzKkVWs7HQGUEUhZH

Describe the single-use credential link and that a request from a group
or thread is delivered only by direct message (nextlevelbuilder/dewee#1760).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01FL32rwzKkVWs7HQGUEUhZH
…vior

Group requests go to the requester's direct messages without a linked
account requirement, a failed direct message revokes the link, and runs
no person started never send a link (nextlevelbuilder/dewee#1777).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01FL32rwzKkVWs7HQGUEUhZH
@mrgoonie
mrgoonie merged commit 800fb9b into main Oct 27, 2026
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants