Your model API keys now stay out of agent sandboxes. Hosted Bento sends every model call through a model proxy, so the sandbox contains a proxy token, not your key. The token only works for that run, and only for model endpoints.
See Security for how the proxy works and which setups still give a key to the agent.
Allowed sites
Teams that block agent network access can now list Allowed sites in Settings, Team. When a team MCP server is enabled, its host is added for you.
In the Mac app
- Agent sandbox typeThe start screen picks Docker sandbox, the default, which isolates each agent in a container, or Local process, which runs agents directly on your Mac and is for development only.
- Model proxyOn by default with the Docker sandbox, so the container contains a proxy token rather than your key. Turn it off under Advanced settings, Model proxy.