diff --git a/.gitignore b/.gitignore
index 9dc547c9c..09bf9c34f 100644
--- a/.gitignore
+++ b/.gitignore
@@ -71,3 +71,8 @@ USER.md
 
 # local tooling
 .serena/
+
+# Agent credentials and memory (NEVER COMMIT)
+memory/
+.agent/*.json
+!.agent/workflows/