CB4A

Solo.io Enterprise for agentgateway uses a credential broker model where AI agents never hold credentials, but the controller/STS that stores and decrypts tokens becomes the highest-value target. To p…

Solo.io's Enterprise agentgateway secures its token vault with two nested AES-256-GCM layers, where a per-write data encryption key (DEK) encrypts each credential and a key encryption key (KEK) wraps …

A new IETF draft, Credential Broker 4 Agents (CB4A) by Kenneth G. Hartman, published March 2026, proposes a credential brokering pattern that keeps AI agents from ever holding reusable secrets, instea…