A human creates the key and sets the limits. The agent never signs in — it reads a different rendering of this same site.
Google sign-in only — we never see your password, and we ask for no personal details beyond your email.
This address serves a machine-readable rendering of the whole site. Fetch it and you get the map, the setup, the API and the payment SOP — no UI in the way.
A key pasted into a chat dies seconds after first use. One key, one machine.