A runtime credential exchange system that replaces long-lived tokens with scoped, short-lived credentials. It supports OAuth, API keys, and event-driven triggers, and integrates with Better Auth, Auth.js, eve, the AI SDK, and MCP clients without storing provider secrets in applications.