Keep business credentials out of the agent.

Gateway connectors authorize and execute operations server-side. Vault supplies credentials through tenant/agent/action bindings.

Execute a connector

result = security.execute(
    agent_id="billing-agent",
    action="invoice.fetch",
    connector="https",
    arguments={"route": "invoice_api", "invoice_id": "INV-100"},
    idempotency_key="billing-fetch-INV-100-20260825",
)

Built-in boundaries

HTTPS routes require administrator allowlists; PostgreSQL uses named read-only queries; SMTP restricts recipient domains. Connector timeouts, redaction and idempotency are enforced.