Connect Deliberately.
Authorize the accounts your agent needs. Granted scopes and provider permissions define the available access.
SECURITY, BY DESIGNPowerful Agents.
Powerful Agents.
Clear Boundaries.
Give your agents room to do useful work. Keep their environment, credentials, and actions under your control.
01 / Isolated environments
Room to Work. Boundaries Built In.
Every hosted agent runs in its own sandbox. Its workspace and available capabilities define where the work can happen.
NVIDIA OpenShell provides the hosted runtime boundary. Your agent uses the tools and connections configured for that environment.
- Dedicated agent workspace
- Runtime isolation
- Explicit tool access
02 / Credential protection
Connect Accounts. Keep Secrets Out of Chat.
Use dedicated connection and credential controls to authorize your tools, instead of pasting passwords or API keys into a conversation.
Managed app connections use provider authorization. Custom credential slots use the platform’s encrypted storage and scoped access. How a secret is consumed depends on the integration.
- Provider authorization
- Encrypted credential storage
- Scoped connections
03 / Human control
Give It Autonomy. Keep Your Say.
Configure which actions require a review. When approval is required, the agent pauses so you can inspect the request before it proceeds.
An app connection gives an agent access to available capabilities. It does not replace your approval policy or the permissions on the connected account.
- Review before execution
- Approve or reject
- Permissions still apply
Control at Every Connection.
Make Review Part of the Work.
Use explicit workflow steps and approval policies where an action needs human judgment.
Build on a Hosted Foundation.
Microsoft Azure provides the cloud foundation. NVIDIA OpenShell provides the hosted agent runtime boundary.
Why OpenShellSecurity Questions, Answered.
A practical look at the controls around your agents.
Still have a question? Talk to our team
Bring Your Security Questions.
Walk through the architecture, controls, and requirements with our team.