Bound at import
Secrets are constrained to an origin, URL pattern, selector, or a defined group of fields before an agent can request a fill.
Secure Browser MCP lets an agent log in, check out, and fill forms while credentials remain in Turnkey Secrets. The agent receives a reference; the broker injects the secret directly into the browser.
Status: alpha. Secure Browser MCP is in early development and has no releases. Do not use it in production or with real credentials yet.
Secrets are constrained to an origin, URL pattern, selector, or a defined group of fields before an agent can request a fill.
Turnkey consensus can park an export for human approval. The page is re-validated immediately before a fill completes.
Every tool result is redacted before it reaches model context, MCP output, or logs. There is no arbitrary script-evaluation tool.