WorkOS Relay lets agents act for users without holding access tokens

WorkOS introduces Relay, a delegated-access service that keeps OAuth tokens at WorkOS and attaches them per-user, preventing token leakage into agent context windows and tool logs. The blog argues agent runtimes erase the trusted-code/untrusted-input boundary, making long-lived tokens dangerous.