SECRETS THE AGENT ASKED FOR · {{ mcp_gate.secrets | length }}

{% if mcp_gate.granted_by %} granted by {{ mcp_gate.policy_name }} · rules {{ mcp_gate.granted_by }} {% endif %} {% if mcp_gate.policy_id %} Open policy {% endif %}
{% for secret in mcp_gate.secrets %} {% else %} {% endfor %}
SECRET GRANT RULE BUDGET READS REFUSED LAST READ
{% if secret.granted %} {{ secret.name }} {% else %} {{ secret.name }} {% endif %} {{ "granted" if secret.granted else "not granted" }} {{ secret.rule }} {{ secret.budget }} {{ secret.reads }} {{ secret.refused }} {{ secret.last }}
The policy grants no secret and the agent asked for none.
A value read belongs to the agent From the read on it may reach the model provider, the agent's own files and so the upper disk, and whatever the agent prints lands in the console log. naos writes no value anywhere, and this view shows names only. Registry credentials and model provider keys are never listed or returned.
{% include "partials/gates_mcp_calls.html" %}