Developer Search
Press ⌘K or Ctrl+K to jump through guides and public API docs for user-owned master key and scoped credential flows.
Quickstarts
Persona Quickstarts
Start with the path that matches your team. Each quickstart assumes least-privilege scopes, short-lived tokens, auditable credential brokerage, and a user-owned master key model.
Web App Team
- Integrate Firebase Auth and pass bearer tokens to public APIs.
- Derive vault key material locally so plaintext master keys never leave user devices.
- Use `/developer/api` for request/response contracts.
- Add typed TypeScript client from generated Connect stubs.
- Validate with usage-pattern checks before production rollout.
MCP Broker Team
- Use OAuth device flow (
Begin-> user approve ->Exchange) for local login. - Avoid static API keys; keep short-lived broker token in memory only.
- Issue selector-scoped credential grants for explicit app/account targets.
- Create/redeem/revoke leases using sender-constrained proofs.
- Keep local decrypt capability in MCP boundary only; platform-side operations stay ciphertext-oriented.
Platform Admin Team
- Set org policy and scope boundaries for broker usage.
- Track deprecations and release notes on every upgrade.
- Review error trends, limits, and support escalation paths.
- Run sandbox rehearsals before enabling new capabilities.
Recommended Sequence
- Auth Onboarding
- API Explorer + SDKs
- Runnable Examples
- Error Catalog + Limits
- Sandbox Validation + Broker Console