Comment by OliverGuy
5 days ago
Yea, I'd be very happy with these systems if I could vend and rotate tempary read only credentials to these agents.
I can't get a read only API key for my YouTube, Gmail, Outlook etc etc accounts. Only full admin access via a browser.
I can get r/o creds for things like GitLab and AWS and K8s, which means I'm very happy to let my agents run wild at work because I know for certain they actually can't do any damage, they can read all they want but can only go as far as opening and MR that I can review and merge.
Well, you could intercept those (gmail etc) requests locally, run fast local classification, and deny anything you don't like. Meanwhile, you can still grant some non-zero level of access and get the agentic benefits?