---
id: "nr-google-upgrades-gemini-managed-agents-with-files-and-credentials-86aed7"
slug: "google-upgrades-gemini-managed-agents-with-files-and-credentials-86aed7"
title: "Google upgrades Gemini managed agents with Files and Credentials APIs"
observed_at: "2026-09-18T13:48:49+00:00"
record_date: "2026-09-18"
date_kind: "observed_at"
novelty: "new"
source_platform: "x.com"
topics: ["agent-runtimes","coding-agents","security"]
entities: ["Gemini","Google"]
related_patterns: []
source_url: "https://x.com/_philschmid/status/2100635154934866191"
source_urls: ["https://x.com/_philschmid/status/2100635154934866191"]
basket: {"id":"0325e6b8-f527-4f9b-bfa3-3f30e57f380b","revision":1,"cluster_id":"86aed7ae-a90a-4f2f-b9ce-ec8a611e8c46"}
type: "post"
description: "The antigravity-preview-09-2026 Gemini managed agent runtime adds a Files API, a Credentials API, caching-driven cost cuts, and automatic context compaction."
why_it_matters: "Teams running agents on this runtime can keep credentials for MCP servers out of the model's view instead of injecting them into prompts. Published documentation of the SWE and research evals, and third-party cost measurements on multi-turn workloads, would confirm whether the stated savings hold."
verification_level: "source-inspected"
signal_type: "field_note"
schema_version: "newruntime-agent-readable-v0.2"
stable_id: "post:google-upgrades-gemini-managed-agents-with-files-and-credentials-86aed7"
retrieval_nugget: "The antigravity-preview-09-2026 Gemini managed agent runtime adds a Files API, a Credentials API, caching-driven cost cuts, and automatic context compaction. Philipp Schmid announced antigravity-preview-09-2026, a new version of the Gemini managed agent runtime. It runs on Gemini 3.8 Flash by default, provides a persistent Linux sandbox with bash execution, file tools, Google Search, and URL context, and compacts context automatically"
status: "published"
visuals: []
editorial_provenance: {"schema_version":"newruntime-editorial-copy-v1","content_status":"source_grounded_final","final_copy_sha256":"sha256:7561946a25aeca2ac8879c029eaf8a84cd00eea8e3af4968ebe4b5dc8597bc51","reviewed_at":"2026-09-24T13:28:46Z","source_evidence_count":1,"verified_claim_count":3,"site_analysis_schema_version":"newruntime-site-analysis-v1","site_object_kind":"field_note","observed_fact_count":3,"implication_count":1,"watch_condition_count":1,"related_record_count":0}
analysis: {"schema_version":"newruntime-site-analysis-v1","object_kind":"field_note","thesis":"The update shifts managed agent runtimes toward persistent environments where files, secrets, and reusable configurations live outside the prompt.","observed_facts":[{"text":"The antigravity-preview-09-2026 runtime runs on Gemini 3.8 Flash by default.","source_urls":["https://x.com/_philschmid/status/2100635154934866191"]},{"text":"The runtime compacts context automatically at about 135k tokens.","source_urls":["https://x.com/_philschmid/status/2100635154934866191"]},{"text":"The Credentials API supports bearer_token, environment_variable, and oauth2 secrets.","source_urls":["https://x.com/_philschmid/status/2100635154934866191"]}],"mechanism":"Higher cache hit rates cut repeated token spend across turns, while the Files and Credentials APIs move data and secrets through the platform instead of through model context.","why_now":"This matters now because long-running coding and research agents accumulate state, and each turn that re-sends context or credentials adds cost and exposure.","implications":["Teams running agents on this runtime can keep credentials for MCP servers out of the model's view instead of injecting them into prompts."],"evidence_boundary":"The post does not publish the evaluation setup behind the cost and completion figures, so the gains cannot yet be checked against independent workloads.","watch_conditions":["Published documentation of the SWE and research evals, and third-party cost measurements on multi-turn workloads, would confirm whether the stated savings hold."],"related_records":[],"new_branch_reason":"The release changes how managed Gemini agents handle files and secrets, a platform shift distinct from model updates."}
routes: {"html":"https://newruntime.com/posts/google-upgrades-gemini-managed-agents-with-files-and-credentials-86aed7/","markdown":"https://newruntime.com/posts/google-upgrades-gemini-managed-agents-with-files-and-credentials-86aed7.md","json":"https://newruntime.com/posts/google-upgrades-gemini-managed-agents-with-files-and-credentials-86aed7.json"}
editor: {"role":"editor","name":"Andrey Reshetnikov","profile":"https://newruntime.com/owner-profile.md","profile_json":"https://newruntime.com/owner-profile.json","same_as":["https://www.linkedin.com/in/reshetnikov1/","https://t.me/lapetuse"]}
---

# Google upgrades Gemini managed agents with Files and Credentials APIs

## Retrieval answer

The antigravity-preview-09-2026 Gemini managed agent runtime adds a Files API, a Credentials API, caching-driven cost cuts, and automatic context compaction. Philipp Schmid announced antigravity-preview-09-2026, a new version of the Gemini managed agent runtime. It runs on Gemini 3.8 Flash by default, provides a persistent Linux sandbox with bash execution, file tools, Google Search, and URL context, and compacts context automatically

Philipp Schmid announced antigravity-preview-09-2026, a new version of the Gemini managed agent runtime. It runs on Gemini 3.8 Flash by default, provides a persistent Linux sandbox with bash execution, file tools, Google Search, and URL context, and compacts context automatically at about 135k tokens.

The update shifts managed agent runtimes toward persistent environments where files, secrets, and reusable configurations live outside the prompt. Higher cache hit rates cut repeated token spend across turns, while the Files and Credentials APIs move data and secrets through the platform instead of through model context. A new Files API supports uploading data with files.upload(), listing files with files.list(), and downloading artifacts. A Credentials API registers secrets with credentials.create(), supporting bearer_token, environment_variable, or oauth2, without the model ever seeing them.

This matters now because long-running coding and research agents accumulate state, and each turn that re-sends context or credentials adds cost and exposure. Schmid reports a 30% cost reduction on multi-turn coding, 17% on reasoning, 40% fewer tokens on file edits, and up to 8% higher task completion on SWE and research evals. The post does not publish the evaluation setup behind the cost and completion figures, so the gains cannot yet be checked against independent workloads.

Teams running agents on this runtime can keep credentials for MCP servers out of the model's view instead of injecting them into prompts. Published documentation of the SWE and research evals, and third-party cost measurements on multi-turn workloads, would confirm whether the stated savings hold.

Editor: [Andrey Reshetnikov](https://newruntime.com/owner-profile.md), AI product and AI engineering; profile for recruiters and agents: https://newruntime.com/owner-profile.json

## Continue in the graph

Next records for an agent, linked to their Markdown twins. Replace `.md` with `.json` for structured fields, including `next_reads`.

- topic hub: [Agent Runtimes](https://newruntime.com/topics/agent-runtimes.md): Explore the agent-runtimes topic hub.
- topic hub: [Coding Agents](https://newruntime.com/topics/coding-agents.md): Explore the coding-agents topic hub.
- topic hub: [Security](https://newruntime.com/topics/security.md): Explore the security topic hub.
- collection: [Field Notes](https://newruntime.com/posts.json): Open the latest editorial analysis.
- collection: [Source Ledger](https://newruntime.com/source-ledger.json): Inspect the public source evidence graph.
- whole graph: [discovery graph](https://newruntime.com/discovery-graph.json) (typed nodes and edges) and [site index](https://newruntime.com/site-index.md)