Why it matters
An exposed key can be reused outside the workflow for which it was intended. Brokering helps separate an agent’s capabilities from the underlying secret.
How it works
A gateway resolves a stored credential when an approved request needs it. The agent uses the resulting scoped capability while the raw key stays bound to the gateway.
How Halo approaches it
Halo brokers provider and app credentials through its gateways. Agents receive scoped capabilities and do not see raw keys.