Comment by radim_h

Quite interesting setup. How are you handling credentials and external API access for the agents, when different agents do need different access?

Are they running with the same permissions as the host, or do you isolate them and give each workflow its own access?