How to handle security-sensitive API Access Tokens with Toolkit

Iris · November 18, 2025, 2:01pm

Hi all!

How do I handle API Access Tokens securely with the Toolkit class so that LLMs are not exposed to any credentials?

I want to create a selection of tools that make API requests to to microsoft GraphAPI. Since this concerns private data, it is crucial that credentials are not exposed.

So far, examples load access tokens from environment variables, but I cannot do this as there are user-specific access tokens that expire quickly and tokens must be refreshed. Hence access tokens must be stored in backend variables
Looking at the example documentation for CustomAPI Toolkit class, it does seem like the actual tool is exposed to the header value in make_request.

What is the safest way to create a toolkit with tools that can make authenticated API calls?

I’m considering initialising a client - rather than passing around access tokens - but haven’t found any examples for that.

Advice would be appreciated!

yuvi · November 18, 2025, 4:31pm

Hi @Iris, thank you for reaching out and supporting Agno. I’ve shared this with the team, we’re working through all queries one by one and will get back to you soon. If it’s urgent, please let us know. We appreciate your patience!

ayush · November 19, 2025, 5:34am

hey, for this you should create a custom toolkit that handles authentication internally, or add an optional token param in your toolkit class so you can generate the access token externally and pass it into your tools.

you can check out this for idea:

github.com/agno-agi/agno

libs/agno/agno/tools/slack.py

47066da3d

import json
from os import getenv
from typing import Any, Dict, List, Optional

from agno.tools import Toolkit
from agno.utils.log import logger

try:
    from slack_sdk import WebClient
    from slack_sdk.errors import SlackApiError
except ImportError:
    raise ImportError("Slack tools require the `slack_sdk` package. Run `pip install slack-sdk` to install it.")


class SlackTools(Toolkit):
    def __init__(
        self,
        token: Optional[str] = None,
        markdown: bool = True,
        enable_send_message: bool = True,

This file has been truncated. show original

github.com/agno-agi/agno

libs/agno/agno/tools/zoom.py

47066da3d

import json
from base64 import b64encode
from datetime import datetime, timedelta
from os import getenv
from typing import Any, List, Optional

import requests

from agno.tools import Toolkit
from agno.utils.log import log_debug, log_info, logger


class ZoomTools(Toolkit):
    def __init__(
        self,
        account_id: Optional[str] = None,
        client_id: Optional[str] = None,
        client_secret: Optional[str] = None,
        **kwargs,
    ):

This file has been truncated. show original

Iris · November 19, 2025, 8:46am

Hi! Thanks a lot for your reply.

My question is: how do I ensure this is safe; e.g. the agent is not exposed to the actual value of the access tokens?

Topic		Replies	Views
Including oauth in calls to tools General agent , tool-call	2	59	October 16, 2025
Using Google Tools from pre fetched creds General agent , tool-call	3	45	August 26, 2025
Create agent at Run time General agent , tool-call , feature-requests	5	173	April 24, 2025
How to access tokens of the specific prompt General agent , knowledge	3	71	May 29, 2025
Custom tools created not working General tool-call	2	96	March 26, 2025

How to handle security-sensitive API Access Tokens with Toolkit

Related topics