Debug Credentials And Auth Hints

Debug Credentials And Auth Hints

Agents often hit login and authentication walls. SuperDev gives them two explicit inputs.

auth_hint

auth_hint is non-sensitive guidance visible to the agent. Use it to explain where to log in, how token refresh works, or which endpoints are dangerous during debugging.

debug_credentials

debug_credentials are plaintext test credentials the agent is allowed to read. Each item has only:

• name
• value
• desc

There are two scopes: project and service. Service credentials override project credentials with the same name.

The plaintext value is only returned by get_debug_credentials. Runtime snapshots and list_services expose only has_debug_credentials and debug_credential_hints, without values.

Environment variables and debug credentials are opposites: env is redacted from the agent, debug credentials are deliberately readable by the agent.

Security Model

Writing a credential means the agent is trusted to read it. There is no separate per-read approval switch. If you do not want the agent to use a credential, do not add it or delete it.