Everything an agent can reach outside the browser: each connected server, the tools it exposes, and the secret handle...
Everything an agent can reach outside the browser: each connected server, the tools it exposes, and the secret handle it authenticates with. This is the blast radius, and a customer who cannot see it cannot consent to it.
Authorizations
An Outcrawl API key, ock_<keyId>.<secret>, minted in the console at https://outcrawl.ai/console/keys, or an OAuth access token, oat_..., issued by https://outcrawl.ai/api/auth with scope api (the CLI gets one from outcrawl login, an MCP client when it signs in).
Response
Everything an agent can reach outside the browser: each connected server, the tools it exposes, and the secret handle it authenticates with. This is the blast radius, and a customer who cannot see it cannot consent to it.
See the matching capability page under docs/app/ and the SDK reference for the exact shape.