Ask Claude to deploy a project to kapaweb. The skill makes Claude read the public playbook (https://kapaweb.gr/deploy-with-ai/playbook.md), check that the connector is current, and call connect. connect opens a sign-in page on your own computer (http://127.0.0.1, random port and token): you type your DirectAdmin address, username and password there, never in the chat. The connector exchanges the password for a restricted DirectAdmin login key, forgets the password, and keeps only the key in your computer's protected storage (Windows DPAPI, macOS Keychain, Linux secret-tool). Plesk (preview): Plesk does not let a customer create a limited key, so for a Plesk account the connector keeps your Plesk password itself in the same protected storage and uses it for every request to your own Plesk panel; the sign-in page tells you this before you sign in, disconnect removes it, and Claude never sees it.
Tools: deploy (always makes a backup first), rollback, list_files, read_file, write_file, db_create, db_import, db_export (streamed, any size, saved on your computer), files_archive, files_extract, files_upload, files_download (zip, unzip, upload and download of files of any size; list_files pages through folders of any size), node_* and files_* (Plesk preview: the Node.js extension and the File Manager of a Plesk subscription), php_versions, set_php_version, php_settings, ssl_status, cron_*, subdomain_*, check_url, logs, usage, account_info, playbook, connect, disconnect. Read-only tools are annotated readOnlyHint, destructive ones destructiveHint.
The credentials the plugin handles are those of the user's own hosting account. On DirectAdmin: the restricted login key, created from a password typed once on the local sign-in page, which is then forgotten. On Plesk (preview): the Plesk password itself, because Plesk lets a customer create no restricted key; it is typed on the same local page, and the page says so before the user signs in. In both cases the secret is kept in the operating system's protected storage and sent only to that user's own verified kapaweb panel. The plugin does not read any other credential, environment token or file from the user's computer.