User-delegated, not platform-controlled.
Airtape gives the user the keys. Your assistant gets only the scopes you choose, and you can revoke access whenever you want.
- disable-model-invocation: true avoids surprise side effects
- Scoped tokens limit what the assistant can do
- User-controlled revocation keeps you in charge
- One-time reveal and hashed storage reduce token exposure