Trailing slashes are removed before use. Explicit environment values override
defaults.
Normal production setup requires no endpoint overrides. Browser authorization
and the local credential vault manage the installation session. Keep
AGENTBANK_MCP_PROFILE stable across restarts and use a different profile for
each local human or agent identity.
On Linux, the default vault is protected by the OS-user boundary and the host’s
disk and backup controls. Copying the complete vault directory also copies its
local key. Managed hosts that require a separately supplied passphrase can use
the file store and inject AGENTBANK_MCP_KEY_STORE_SECRET outside the model
and repository.
Hosted OAuth connections do not use a local MCP credential profile.