Agent metadata

Agent registry metadata is inspectable data, not an instruction to execute untrusted tools.

01Safe by default

Mounting a pack for retrieval does not execute tools. A host only applies prompts, tool policy, or namespace grants if it explicitly chooses to honor them.

02Never store credentials

Credentials must never be stored inside a pack. Treat agent metadata as untrusted input and surface its boundaries in the host application.