What is secrets handling?
Answer in brief
How API keys and credentials are made available to code in a sandbox without being exposed to the model or leaked.
Secrets handling in agent sandboxes
Good patterns include short-lived, narrowly scoped tokens; injecting secrets through a proxy so the sandbox never sees the raw value; and never placing secrets in the model’s context. Assume anything inside the sandbox can be read by the agent.
Cite this page
Agent Sandboxes. (2026). What is secrets handling?. agentsandboxes.org. Last reviewed November 8, 2026. https://agentsandboxes.org/glossary/secrets-handling/
Found an error or a missing sandbox? Submit a correction — every entry links to the sources it relies on.