Mem0 introduced Gateway, which gives each agent a single key that exposes only the tools granted to it, covering both MCP servers and a team's own APIs. Grants can be changed when the job changes, the agent never sees the real underlying credentials, and Mem0 says beta customers already run over 95,000 calls each through it.
For agent builders, the mechanism moves least privilege from model behaviour into a proxy layer, so an agent that checks a payment need not hold a key that can also refund it. The post does not describe audit logging, credential rotation, or how the gateway itself is protected as a central point of trust.