One bootstrap call grants your agent cryptographic identity, an encrypted credential vault, and secure, policy-enforced access to any API. No manual setup, no OAuth dance, no secrets in plaintext.