Google gives every AI agent its own computer — with no keys inside it

Google Cloud announced Agent Compute Engine on October 22 at AGNTCon + MCPCon, a service that gives every AI agent its own hardware-isolated microVM — a persistent computer with its own guest kernel, root access, and storage. It is the infrastructure that already runs Gemini's agents, Antigravity, and Google's model-training pipelines; customer preview opens in the coming months.

The design assumes a prompt-injected agent is already inside the box: the sandbox holds zero credentials — no API keys, no OAuth refresh tokens, no service-account keys — and credentials are swapped in by an external gateway only as requests leave. Google's own example is an inbox agent told by a hidden email to find and send API keys: there is nothing in the machine to steal.