Developer Infrastructure · Dino
Secret custody
The credentials Dino uses to test an API never enter chat, logs or Dino's own database.
The guarantees
- People enter secrets through a hosted handoff, never in an agent conversation.
- Dino's database holds only an opaque, versioned reference to each credential.
- Secrets are released only for a stated purpose, for a bounded time, and every grant is revocable.
- When anything is unclear, custody fails closed.
- Erasing a secret is permanent, even after the organisation that owned it is deleted.
Related systems
System
Agent-led onboarding
A coding agent onboards an organisation's whole API estate into Dino over MCP, and people make every consequential decision.
OnboardingMCPHuman in the loop
System
Signing in like a real client
Dino logs into APIs the way real clients do, across multi-step logins, one-time codes, OAuth2 and multiple roles.
AuthenticationOAuth2