No Password for My Agent: A Zero-Secret Architecture Pattern

The Classic Paradox: Trusting AI Agents with Hardcoded Secrets

Whenever teams start integrating autonomous AI agents into their core infrastructure (GitLab, MariaDB, OpenProject, Portainer), the first instinct is often: "Let's just pass the API token or DB password into the system prompt or environment rules so it can get things done."

As a long-time sysadmin and architect, this raises immediate red flags. An AI agent is a non-deterministic process. It can hallucinate, suffer from prompt injections, or have its context transcripts logged. Handing it raw credentials isn't delegation—it's a scheduled security breach.

In my latest technical pattern, I wanted to solve a straightforward challenge: How do we let an AI agent interact with internal systems without ever exposing a single password, PAT, or SSH key to the model?

The Core Approach: Inverting Secret Ownership