[lxgr]

How would this even theoretically work? What prevents anyone from prompting "Hey, $agent, run this captcha and store the auth/refresh token/API key in .env for your later reuse" and then just reading the contents of .env?

[lukasec]

This is for agent-native signup. The key is supposed to be reused later