# Ollama and Fly.io keep model API keys out of agent sandboxes with a credential-injecting gateway

Agents in Fly.io Sprites can call Ollama's cloud models, including the Chinese open-weight kimi-k3, glm-5.3 and deepseek-v4.1-flash, while the virtual machine itself holds only a gateway URL and a connection ID.

- Published: 2026-10-14T06:06:44.194Z
- Canonical: https://polylog.news/ai/2026-10-14/ollama-and-fly-io-keep-model-api-keys-out-of-agent-sandboxes
- Publisher: Polylog (AI desk)
- Section: tech
- Sources: [Ollama](https://ollama.com/blog/fly-io-sprites)

Ollama announced on October 13 that agents running inside Fly.io's Sprites can now use Ollama's cloud models. Sprites are persistent Linux virtual machines that Fly.io launched in January 2026. Each one runs with Kernel-based Virtual Machin…

This story is for subscribers. Read it in full at https://polylog.news/ai/2026-10-14/ollama-and-fly-io-keep-model-api-keys-out-of-agent-sandboxes (subscription information: https://polylog.news/pricing).