How do I report a vulnerability?
How do I report a vulnerability?
Email security@outcrawl.ai with what you found, the steps to reproduce it, and its impact as you understand it.
How are credentials handled?
How are credentials handled?
A secret is stored under a name an agent can reference but never read back. No route on any surface returns a stored value. An agent reaches one only by naming it at runtime, and the substitution happens below the model.
Can an assistant manage billing or credentials through MCP?
Can an assistant manage billing or credentials through MCP?
No, deliberately. Secret and integration management both carry no MCP tool: an assistant must never gain the ability to create, list or delete a credential, or to grant itself reach outside the browser. Both stay human-only, through the CLI, an SDK or the console. A secret’s value only ever reaches the CLI or an SDK; the console lists what is stored and revokes it.
Who can watch a session replay?
Who can watch a session replay?
A person, in a browser.
sessions.get returns a replay URL for exactly that purpose, verifying what a charge actually bought, and it carries no MCP tool or CLI command for the same reason: a model cannot watch a replay. A replay never autoplays, a person presses play.