exe.dev integrations let you store secrets with exe.dev’s control plane so your VMs (and the agents on those VMs) can access services without seeing the secrets themselves. The next step is to avoid having the secret to begin with. When exe.dev and the other service both support Workload Identity Federation (WIF), you can do just that.
If you’ve been using API keys for exe.dev’s LLM gateway, there’s now another way. Both Anthropic and OpenAI support Workload Identity Federation. Two fewer keys to lose!
Pro tip: agents are excellent at configuring WIF on your behalf.
