Credentials and installations.

Create an independent credential for every actor surface, inspect safe usage metadata, and retain revoked rows as audit history.
Active
0
currently authorized
Revoked history
0
retained for audit
New API key
Use a clear label for a local agent, worker, or another supported client.
New Raycast installation
Give each Mac its own least-privilege key and developer-mode setup bundle.
Credential inventory
Active and revoked credentials, including scopes and safe usage metadata.