DON'T GIVE YOUR AGENT A TOKEN. GIVE IT A PROXY.

Summary from the TLDR Dev newsletter

What happens when you give your agent an access token and it gets hijacked? Relay [12] (early access) keeps the credential at WorkOS and injects it only on requests to allowlisted hosts. A hijacked agent can still make bad calls, but it can't walk away with the token, and the