Passwords and API keys never reach the AI
Connected accounts are held by gbrain. An AI gets the result of a call, never the key.
What it does
gbrain makes the call; the AI gets the result
The AI asks gbrain for an operation. gbrain checks the permission and the daily limit, makes the call itself, and returns the result.
A compromised AI finds no keys
There is nothing in the container to steal. It can reach only the results of calls it was allowed to make, and each is logged.