DON'T GIVE YOUR AGENT A TOKEN. GIVE IT A TASK

Summary from the TLDR Dev newsletter

What happens when you give your agent an access token and it gets hijacked? Relay [11] keeps the credential at WorkOS, attaches it only when needed, and releases it only to allowlisted hosts. A hijacked agent session becomes a live process you can kill. You can't leak