Your AI agent needs API access. It shouldn’t need the API key.
AI agents need access to GitHub, Stripe, Linear, and other services to do useful work. But handing an agent a real API key creates credential exfiltration risk through prompt injection, a compromised runtime, or exposure to the LLM provider.
Infisical Agent Proxy lets agents use those services without ever seeing the underlying secret. The agent receives a placeholder, and the proxy swaps in the real credential only when the outbound request crosses the network boundary.
The result: developers can keep building and deploying agents without putting real credentials inside unpredictable workloads. Existing API calls, SDKs, CLIs, and MCP connections continue to work, and 30+ pre-built integrations reduce the configuration required.
See how Infisical Agent Proxy helps teams give AI agents access to the services they need without handing over the secrets behind them. Explore how it works, review the supported integrations, and start building for free with less credential risk.
Kimi K3 Architecture Notes
Kimi is a model developed outside of US and has surpass even Fable, gain immensively amount of traction. If you had a Mac with 64GB RAM, you can try running Kimi K3 (2.8T parameters) on one Apple Silicon Mac
The Right Way to Give a Third-Party DBA Access to Your PostgreSQL Database
Giving an external team access to your PostgreSQL database is one of those decisions that deserves a little thought. The easiest option is to hand over a superuser account, but it’s rarely the right one. A better approach is to create a dedicated role with only the privileges they actually need, and it takes just a few minutes to set up.
My Agentic Coding Setup, July 2026
Domenic Denicola is the author behind jsdom. He shared with us how he setup his agentic coding. The biggest take a way is usage of tailnet and a linux vm to run thing and make accessible across devices with tailnet.
What's in a GGUF, besides the weights - and what's still missing?
GGUF is the file format that llama.cpp uses for language models. The safetensors are a bunch of json files. GGUF is a single file. What makes it work?
Measuring Component Performance with the Container Timing API
Largest Contentful Paint gives us a useful high-level signal for the point at which the largest thing in the viewport was rendered. It is much less good at telling us when our things looked ready. Enter the Container Timing API: an experimental performance API that allows us to annotate a whole region of the DOM and receive entries as new, contentful parts of it are painted.
Session revocations at scale
Managing sessions for hundreds of millions of users is a tricky problem because every backend request needs to know which logged-in user made it. At Canva’s scale, this means answering this question hundreds of thousands of times every second. We keep session revocations directly in memory for the best possible performance and reliability, but as we grew, loading this cache during deploys became a bottleneck.
A Guide to Watchdog Timers for Embedded Systems
At some point you’ve probably had to unplug and plug back in an electronic device to get it to work again! System freezes and hangs are not only frustrating to an end user, but they can also be quite challenging to debug and fix. or some classes of devices, such as a satellite1, a manual reset is not even possible, making a wedged device a multi-million dollar “brick”.
Embedded Systems - Shape The World
When we turn on the coffee machine, when an oven run, a bridge report its temperature, embedded system is everywhere around us, in our daily life.
Running a 28.9M parameter LLM on an $8 microcontroller
28.9 million parameter language model that generates text on an ESP32-S3, a microcontroller that costs about $8. It runs on the chip itself, with nothing sent to a server, and it writes each word to a small screen wired to the chip at roughly 9 tokens per second.
syncular
offline-first SQL sync you can operate. Clients keep a real local SQLite database (OPFS in the browser, native SQLite elsewhere), writes go through an optimistic outbox, and one ordered commit log on the server stays the source of truth.
maplibre-gl
MapLibre GL JS is a TypeScript library that uses WebGL to render interactive maps from vector tiles in a browser. The map’s appearance is controlled by a style document whose structure and properties are defined by the MapLibre Style Spec. It is part of the MapLibre ecosystem, with a counterpart for Android, iOS and other platforms called MapLibre Native.
uniface
A Unified Face Analysis Library for Python | Detection, alignment, landmarks, recognition, parsing, gaze, attributes and anti-spoofing under one API.