# sherlock

Per-operator credential broker + agent-CLI wrapper for the Charlie homelab. Holds the Authentik session once, injects per-service tokens into MCP servers, and execs the agent CLI of your choice (Copilot today, Claude Code or any other MCP-aware agent tomorrow).

Design + phasing: [plan.md](plan.md).

## Docs

- [Architecture](docs/architecture.md)
- [Auth model](docs/auth-model.md)
- [Storage & keyring](docs/storage.md)
- [Broker RPC](docs/rpc.md)
- [Service registry](docs/service-registry.md)
- [Agent profiles](docs/agent-profiles.md)
- [gssh integration](docs/gssh-integration.md)
- [Conventions](docs/conventions.md)