Read one stored app login and its audit trail (never a secret).

One connection's metadata, which secrets are saved and which it still needs, and its newest 20 audit rows (events: created, updated, secret_saved, secret_removed, test_login, decrypted_for_job, deleted; never a value). Each secret is sealed the moment it is saved: the website and the Story API can save or replace one but never read it back, MCP and Slug never take one, and no read returns one (only which kinds are saved). Only the machines that record a capture can open it, to sign in to your app; a saved session's cookies for your app (never a password) may also go to Cloudflare's hosted browser, which only reads a light app's screens to learn its features. Reads only.