[JulienBrouchier]

It is a two step process : - First you create a container/sandbox/machine to contain your agent in it. If you are a dev, dev containers are a good solution. If you use OpenClaw, OpenShell is nice. there are plenty of examples on how to deploy it in a cloud instance. - Second you craft a set of credential with limited scope just for the job you want this agent to do. Don't trust the agent to restrict itself (it won't), just give it the minimum.

Practical example : you want an agent to read some of your mails and answer them. You don't give the agent access to your whole Gmail account, you create a second account for your agent and you forward the mails of interest to that second account.