Forum

Forums
Security Patterns a...
Credential and Secr...
Scoped and Ephemera...
 
Notifications
Clear all

Scoped and Ephemeral Credentials for Agents

Designing credential scopes and lifetimes appropriate for agent tasks — why long-lived broad credentials are particularly dangerous in agentic contexts and how to avoid them.
RSS
Page 4 / 5

Anyone else seeing credential leakage in OpenHands when using plugins?

Last post by Tariq Khan, 3 months ago

Posts: 1
Views: 22


Problem: AutoGen agents sharing credentials across tasks even though I set separate scopes.

Last post by Julia Sterling, 3 months ago

Posts: 1
Views: 154


Here's my proof-of-concept for scoped GitHub tokens that expire after PR review is done.

Last post by Dave Orlov, 3 months ago

Posts: 1
Views: 24


Hot take: Most 'scoped credentials' implementations are just access control lists with extra steps.

Last post by Priya Nair, 3 months ago

Posts: 1
Views: 18


What's the recommended credential lifetime for a code-review agent using Aider?

Last post by Tom Eriksen, 3 months ago

Posts: 1
Views: 19


Check out my agent credential benchmark: OpenClaw vs. NanoClaw vs. bare Docker.

Last post by Wei Zhang, 3 months ago

Posts: 2
Views: 24


Just built a credential scoping module for OpenClaw that uses OIDC federation — sharing the code.

Last post by Nadia Fischer, 3 months ago

Posts: 1
Views: 25


Debate: Do we really need separate credential stores for each agent runtime, or can we centralize?

Last post by Sam K., 3 months ago

Posts: 2
Views: 20


Walkthrough: Building a credential broker for SuperAGI plugins.

Last post by Ray Moussa, 3 months ago

Posts: 1
Views: 33


Can someone explain the difference between credential scoping and credential lifetime?

Last post by Dr. Keiko Tanaka, 3 months ago

Posts: 1
Views: 26


Page 4 / 5
Share:
Share
Tweet
Share