# Keeping credentials out of an AI agent's context with Relay

DevFeed: [Keeping credentials out of an AI agent's context with Relay](<https://devfeed.tech/articles/keeping-credentials-out-of-an-ai-agent-s-context-with-relay-16010.md>)

Original publisher: [Read original article](<https://workos.com/blog/credentials-out-of-agent-context>)

Author: WorkOS

Published: 2026-08-31T00:00:00Z

Content type: article

Language: en

Sources: [WorkOS Blog](<https://devfeed.tech/sources/workos-blog.md>)

Topics: [AI Agent](<https://devfeed.tech/topics/ai-agent.md>), [prompt injection](<https://devfeed.tech/topics/prompt-injection.md>), [API](<https://devfeed.tech/topics/api.md>), [context](<https://devfeed.tech/topics/context.md>), [OAuth](<https://devfeed.tech/topics/oauth.md>)

Tags: [agent](<https://devfeed.tech/tags/agent.md>), [ai-agent](<https://devfeed.tech/tags/ai-agent.md>), [api](<https://devfeed.tech/tags/api.md>), [context](<https://devfeed.tech/tags/context.md>), [credentials](<https://devfeed.tech/tags/credentials.md>), [prompt-injection](<https://devfeed.tech/tags/prompt-injection.md>), [third-party](<https://devfeed.tech/tags/third-party.md>)

## AI overview

The article explains how WorkOS Relay keeps third-party API credentials out of an AI agent's context. Relay proxies outbound calls and injects credentials at the boundary, reducing the opportunity for prompt injection to steal or exfiltrate bearer tokens. The document says Relay shipped on August 6, 2026 and is in early access.

## Source excerpt

Relay proxies an agent's third-party API calls and injects the credential at the boundary, so prompt injection has no token to steal and nowhere to send it.