Relay proxies an agent’s third-party API calls and injects the credential at the boundary, so prompt injection has no token to steal and nowhere to send it.
Keeping credentials out of an AI agent's context with Relay
calendar_today
August 31, 2026
domain
workos