Tweet by jonas

July 22, 2026

Do you want your AI agents in their little sandboxes to use your API keys without ever seeing them? Here's a cool thing you can do with cloudflare durable objects that I haven't seen elsewhere You can model the secrets as durable objects that you fetch _through_ in order to use the secret 🤯 Each secret is bound to an egress host and the only codepath that can ever read the secret is a fetch to that host And even better, you can then use the cloudflare container magic HTTPS MITM interception to let any program in a container use your secret without ever seeing it (yes yes in reality it's a bit more complex because we encrypt the secrets, allow multiple egress hosts, support websockets, etc etc)

Author
jonas
Date
July 22, 2026
Open on X