> ## Documentation Index
> Fetch the complete documentation index at: https://docs.wipe.me/llms.txt
> Use this file to discover all available pages before exploring further.

# Private handoffs for humans and agents

> Choose a Wipe.me workflow for people, AI agents, tools, and automated systems.

Imagine that you ask a coding agent on a remote server to deploy your application.
The agent needs your Cloudflare API token, and after deployment it creates a database
password that you need to save. Pasting either value into the agent conversation
would leave plaintext in its transcript.

With Wipe.me, you send the API token as a one-time private link. On the remote server,
Wipe.me places it directly into the deployment environment without returning it to
the model. When the server creates the database password, Wipe.me encrypts it there
and the agent sends a private link back to you. The tools and people receive the
values they need; the agent conversation carries only the temporary links.

Wipe.me turns that transfer into a private, encrypted, one-time handoff. Encryption
and decryption happen locally, and the service stores only an opaque encrypted
envelope.

<Note>
  The arrows below describe who initiates and coordinates the workflow—not a plaintext
  path through an AI model. When an agent participates, it should handle only protected
  link references, file paths, and commands. Plaintext is delivered by the local CLI to
  a human, a protected file, an environment variable, or a trusted tool.
</Note>

<CardGroup cols={2}>
  <Card title="Human → Human" icon="users" href="/use-cases/human-to-human">
    Share a secret or private file without placing its plaintext in chat, email, or a ticket.
  </Card>

  <Card title="Human → Remote agent" icon="user" href="/use-cases/human-to-agent">
    Send a credential from your notebook to a tool running in a remote agent environment.
  </Card>

  <Card title="Remote agent → Human" icon="bot" href="/use-cases/agent-to-human">
    Receive a database password, recovery artifact, or private configuration created on a remote machine.
  </Card>

  <Card title="Agent → Agent" icon="network" href="/use-cases/agent-to-agent">
    Pass a kubeconfig, generated database password, or private artifact between agents on different machines.
  </Card>
</CardGroup>

## Choose the narrowest exposure

Prefer a workflow where the fewest components ever receive plaintext:

1. A private link is better than raw plaintext in a durable conversation.
2. A protected link file is better than a link in command history or agent output.
3. Direct environment injection into a trusted tool is better than exposing the
   secret to an agent and asking it to relay the value.

In agent-coordinated workflows, do not use plaintext stdout as the handoff. Run
Wipe.me beside the sensitive value: use structured MCP tools on compatible agent
hosts, or use CLI file and process workflows on remote shells and runners.

<Warning>
  An Auto-mode private link is a complete bearer capability. Anyone who obtains it may
  be able to open or delete the message. A Custom-mode link also requires its
  separately shared passphrase. Keep links in protected files or similarly narrow
  channels where possible. Wipe.me reduces incidental retention; it does not make an
  untrusted human, model provider, plugin, or child process trustworthy.
</Warning>

## Availability

Browser-based creation and opening are available today. The published
`v0.3.0-alpha.3` CLI preview supports creation, deletion, local retrieval to
protected files, direct `exec` injection, compact links, manual passphrases,
attachments, generated-password workflows, and a local agent-safe MCP server.
These allow an agent to coordinate an operation without receiving the plaintext in
model context.

<Card title="Command-line interface" icon="terminal" href="/developer-tools/command-line-interface">
  Review exact availability, installation options, protected link sources, and CLI security behavior.
</Card>

<Card title="MCP server" icon="bot" href="/developer-tools/mcp-server">
  Coordinate generated secrets, private files, environment injection, and trusted commands through MCP.
</Card>