Formal

Giving Cloud Agents Production Access with OIDC, Not Secrets

Formal engineer Aditya Saligrama explains how the company lets cloud coding agents such as Cursor and Devin query production data and cloud infrastructure without long-lived secrets: the agents act as OIDC issuers, and Formal grants each session short-lived, read-only, policy-controlled and auditable access tied to the engineer, repository and run.

Blog post · AI Agents · Security · Infrastructure