Delegated Authorization for AI Agents: Scoped, Short-Lived Credentials
Why agents should never hold a user’s long-lived credentials, and how OAuth token exchange gives you scoped, short-lived, auditable delegation instead.
Security
MCP Gives AI Agents 1000 Tools. Who Decides Which Ones They Can Use?
Why I built AgentIAM — and why this problem is only going to get bigger.