Credentials stay in the daemon
The daemon owns every password and token in an age-encrypted vault. Clients only reach it over a Unix socket.
Risky sends are held
A send to anyone off the allowlist is saved as a draft for you to review, never sent.
Agents speak MCP
chainmail mcp gives agents the same calls as the CLI, behind the same policy and audit log.