Google adds Files API and secret-safe Credentials API to Gemini managed agents

_philschmid · x · 2026-09-18

Google shipped two new APIs for Gemini managed agent environments:

Files API: move data in and out of agent sandboxes — files.upload() for inline seeds or mid-conversation uploads, files.list() to inspect generated files and directory sizes, files.download() for artifacts, dashboards, reports, CSVs or git repos; sandboxes persist across turns via environmentid.

Credentials API: authenticate with external services and MCP servers without the model ever seeing secrets — credentials.create() supports bearertoken, environmentvariable and oauth2 (auto-refresh, token rotation); secrets never enter model context, stdout, or memory, with the agent seeing only placeholders.

Related event: Google Ships antigravity-preview-09-2026 for Gemini Managed Agents with Files and Credentials APIs(6 posts)→

Original post →

More from coding & agent

coding & agent channel →