REFERENCE / AGENT METADATA

Agent metadata

Agent registry metadata is inspectable data, not an instruction to execute untrusted tools. Hub does not execute agent metadata.

01Safe by default

Verification inspects the agent registry. The playground is retrieval-only. Mounting a pack does not execute tools, apply prompts, or honor namespace grants. A host only applies those policies if it explicitly chooses to.

02Never store credentials

Credentials must never be stored inside a pack. Treat agent metadata as untrusted input and surface its boundaries in the host application. A secret scan on publish fails closed on obvious keys and tokens; it is not a substitute for review.