Tweet by KentonVarda

March 24, 2026

But that's only half of it. Lots of people today are talking about keeping API keys out of your agent sandbox by injecting them into requests on the way out. You can do that with Dynamic Workers, but you can also do *much better*. Dynamic Workers let you block internet access entirely, and then constructively grant the sandbox access to specific TypeScript interfaces, via Cap'n Web RPC. Essentially you can invent your own "Workers bindings" to give it, pointing at whatever you want. A chat room. A git repo. Etc. You can define the RPC interface to support exactly the operations you want to support, so it's totally obvious what the agent can and can't do. Then you just tell the agent the TypeScript type definition of the interface and let it code. This is *much* cleaner than intercepting HTTP requests, and easier for the agent to understand, too. Check out the docs here: https://t.co/ZiPdtWXZqj

Author
KentonVarda
Date
March 24, 2026
Open on X