tag
Read mini classes on this topic together, starting with the latest lessons for context.
lessons
Tag guide
This tag gathers mini classes around one specific topic. Start with the newest post, then use categories and related reading for context.
Map every identity handoff in an AI agent’s call chain. Exchange tokens for each downstream API, preserve user and agent identities, and reject mismatched audiences or excessive scopes.
When an AI assistant starts looking up invoices, handling payment exceptions, or preparing ERP changes, a separate identity, default-deny access, and human escalation keep every step within accountable boundaries.
When an AI workflow builder shows exposure risk, do not rotate every token at once. First contain the exposed entry points, preserve logs, then use flows, credentials, data sources, and logs to identify the real keys at risk.