←新闻详情

Philipp Schmid更新于 10月14日 22:32

Gemini Managed Agents 推出 Credentials API

Passing API keys or secrets as normal env lets any dependency in your agent's sandbox read and potentially leak them.

AI 导读

把 API keys 或密钥当作普通环境变量传递,会让智能体沙箱里的任何依赖读取并可能泄露它们。 Gemini Managed Agents 的 Credentials API 可保障密钥安全,仅在可信域名上于传输时注入,因此沙箱代码无法访问原始 token。适用于环境变量、CLI 和 MCP Server。 了解更多 👇

引用

Philipp Schmid

@_philschmid

https://t.co/lN9V4SnaYF

查看原帖

正文

当前显示原文,中文全文译文尚未就绪。

Passing API keys or secrets as normal env lets any dependency in your agent's sandbox read and potentially leak them.

The Credentials API for Gemini Managed Agents keeps secrets secure and injects them on the wire only for trusted domains, so sandboxed code can't access raw tokens. Works for environment variables, CLIs and MCP Server.

Learn more 👇

来源

Philipp Schmid