Gemini Managed Agents 推出 Credentials API，沙盒内代码无法读取密钥原文
Passing API keys or secrets as normal env lets any dependency in your agent's sandbox read and poten...
跑 agent 沙盒的人注意了，Google 这个 Credentials API 能让密钥不发进沙盒，按域名注入，env、CLI、MCP 都能用。
Philipp Schmid 介绍了 Gemini Managed Agents 的 Credentials API。传统做法把 API 密钥放进普通环境变量，沙盒里的任意依赖都能读取并可能外泄。Credentials API 只在请求发往受信任域名时在线注入密钥，沙盒代码接触不到原始 token。该机制支持环境变量、CLI 和 MCP Server 三种方式。
Passing API keys or secrets as normal env lets any dependency in your agent's sandbox read and poten...
Passing API keys or secrets as normal env lets any dependency in your agent's sandbox read and potentially leak them. The Credentials API for Gemini Managed Agents keeps secrets secure and injects them on the wire only for trusted domains, so sandboxed code can't access raw tokens. Works for environment variables, CLIs and MCP Server. Learn more 👇 Philipp Schmid @_philschmid x.com/i/article/2104… 🔗 View Quoted Tweet 💬 10 🔄 1 ❤️ 19 👀 1863 📊 9 ⚡
