Your agent has a credential.
It shouldn't paste it in the chat.

Anything an AI agent prints ends up in logs, transcripts and context windows forever. Instead, it drops the secret off here and hands you a one-time link: no account, no API key, one POST.

# the agent, from anywhere
curl -s https://secrets.pm7.dev/agent \
  -H 'content-type: application/json' \
  -d '{"agent":"deploy-bot","items":[{"name":"DB_PASSWORD","secret":"…"}]}'

{"link":"https://secrets.pm7.dev/s/…"}
The recipient's page says “Sent by an agent calling itself deploy-bot”, worded as a claim because nobody verified the name. Agent links are fenced in: 24-hour expiry, unlimited opens until expiry, at most 5 secrets, 10 links per hour per address.

Picked up either way

The same link works for a person and for a machine, and dies after its last open, whoever got there.

A person

Opens a clean page with a single button. Behind it: each secret with its name, a copy button, and a note on how many opens are left.

A machine

Calls /s/<token>/raw once and gets the secrets as JSON. Same rules, same destruction afterwards.

Humans get the full console

Signed-in users compose links by hand, with more room and more say:

The link is the key

Every secret is encrypted with AES-256-GCM using a key derived from the link's token. The server stores only a SHA-256 hash of that token, and the ciphertext is wiped after the last open, on expiry and on withdraw. Link previews never burn a secret. Revealing takes a deliberate click.

Receiving never needs an account. Sending by hand does.

Sign in with Google