Gemini Managed Agents 推出 Credentials API
Passing API keys or secrets as normal env lets any dependency in your agent's sandbox read and potentially leak them.
AI 导读
把 API keys 或密钥当作普通环境变量传递,会让智能体沙箱里的任何依赖读取并可能泄露它们。 Gemini Managed Agents 的 Credentials API 可保障密钥安全,仅在可信域名上于传输时注入,因此沙箱代码无法访问原始 token。适用于环境变量、CLI 和 MCP Server。 了解更多 👇
查看原帖https://t.co/lN9V4SnaYF
正文
当前显示原文,中文全文译文尚未就绪。
Passing API keys or secrets as normal env lets any dependency in your agent's sandbox read and potentially leak them.
The Credentials API for Gemini Managed Agents keeps secrets secure and injects them on the wire only for trusted domains, so sandboxed code can't access raw tokens. Works for environment variables, CLIs and MCP Server.
Learn more 👇