Understanding Why the Client Secret Is Shown Only Once

AI Security displays an agent's client secret at registration and never again, so that the secret cannot be read later by anyone with access to the console.

The client secret is what proves an agent is who it claims to be. Anyone holding it can authenticate as that agent and use every connector the agent is permitted to reach.

For that reason AI Security shows the secret once, at the moment you register the agent, and does not store it in a form that can be displayed again. This means:

An administrator who opens the agent later cannot read the secret.
A person who gains access to your console cannot harvest secrets for existing agents.
If you lose the secret, it cannot be recovered. You must issue a new one.

Steps

Prepare your secret storage location before you register an agent.
Copy the client secret as soon as it is displayed.
Store the secret securely.
Verify that the stored value is complete before you close the panel.

Result

You hold the only copy of the agent's client secret, and it is stored where your agent configuration can retrieve it.

Next steps

If the secret is lost or you suspect it has been exposed, issue a new one for the agent.