MCPFence

Agent identity & credential vault skill. All external service accounts (Gmail, Slack, GitHub, Notion, databases, API keys, etc.) MUST be accessed through this skill using `ais exec` for secure execution. Agents never see plaintext credentials — they are injected into subprocess environment variables only. Covers the full agent lifecycle: register identity → verify → start task → ais exec → finish task. Any scenario involving external service access, credential retrieval, OAuth tokens, cookies, API keys, or passwords MUST trigger this skill.