KEEPING CREDENTIALS OUT OF AN AI AGENT'S CONTEXT WITH RELAY

Summary from the TLDR Founders newsletter

WorkOS Relay proxies third-party agent API calls and injects the credentials at the boundary so prompt injection attacks are unable to steal tokens. It lets apps call third-party APIs on behalf of users without directly handling secrets. Requests are proxied through WorkOS, where credentials are swapped in based on the user and organization context. Relay is still in early access, and access requires contacting support.