Topic
All digests tagged OAuth 2.0
Suggested route
Move from earlier context through the available material to the newest signals. This route is a reading aid, not a difficulty ranking.
Agent authentication requires per-agent identity, delegation, and short-lived scoped credentials. Gateways are necessary to move credentials out of the agent's reach, providing physical control and instantaneous revocation.
Read article
Learn how to build agent-ready apps using open standards. We cover the auth.md protocol, ID-JAG identity assertions, and scoped tokens for secure agent access.
Read article
Securing AI agents requires moving beyond standing credentials. By implementing OAuth token exchange and using a Security Token Service (STS), organizations can enforce task-scoped, ephemeral access, mitigating the risk of the 'lethal trifecta.'
Read article
Learn how Airbyte designed two interfaces—MCP and CLI—to make data actionable for AI agents. Discover best practices for building agent-friendly CLIs and understanding the trade-offs between MCP and CLI architectures.
Read article
Agent authorization depends on context: low stakes use system logs, medium stakes use OAuth scopes, and high stakes require layered selective disclosure JWTs. PayPal introduces an approval token to invert the order flow.
Read article
Grant Miller breaks down five proven patterns for integrating AI agents with tools, detailing the progression from simple APIs to secure token-based architectures using OAuth flows, MCP, and vaults.
Read article