An ordinary authenticated read, not part of opening the account. It was written carrying the signup session in its own Authorization header, which made it the one operation here that could never run once the account existed. The key arrives through credential_injections like every other authenticated ask.
Nothing: your AI starts it with your words.
Connect the AI you already use to Trillion once. Then ask in your own words; your AI finds this tool by what it does and runs it.
Say to your AI: “Use Trillion to an ordinary authenticated read, not part of opening the account. It was written carrying the signup session in its own Authorization header, which made it the one operation here that could never run once the account existed. The key arrives through credential_injections like every other authenticated ask”
What your AI calls: run_tool {"tool_id":"tool:agentphone-who_am_i"}