authorization

A developer created an MCP server that acts as an authorization gate for AI agents, enforcing spending mandates such as per-transaction limits, daily/weekly caps, and allowed merchants to prevent overspending.

This paper proposes a compositional authorization framework for agentic AI systems, introducing primitives for delegation, scope attenuation, and recursive permission chains to govern autonomous AI agents.

A proposal for an 'Autonomy Kernel' layer that separates authority from agent reasoning, allowing scoped, revocable permissions and auditing, analogous to an operating system kernel.

Tutorial on how to use the deepseek-v4-flash:free model for free in the hermes-web-ui panel by re-authorizing login via CLI, provided you have subscribed to the nousresearch $0 plan.

IamAgent is an authorization layer for AI agents that pauses sensitive actions and sends push notifications to your phone for approval. It integrates with multiple agent frameworks and is free for personal use.

This paper introduces a Distributed Trust Framework (DTF) for verifiable, proof-derived authorization in autonomous AI agent systems, addressing the risks of identity-centric permissions by requiring justification proofs and consensus for execution.

The article asks about cross-server authorization challenges when multiple MCP servers (e.g., Gmail, Github, Slack) are used together in an AI agent session, and whether a dedicated authz layer is needed beyond per-server OAuth.

This paper introduces 'authorization propagation' as a distinct security challenge in multi-agent AI systems, arguing that identity governance must be treated as infrastructure to maintain authorization invariants across autonomous agent interactions.

Clawvisor is a new authorization layer for AI agents that enables secure access to apps like Gmail and Slack without exposing credentials or allowing rogue actions, solving key safety issues in agent deployment.

Keycloak is an open-source identity and access management tool that provides authentication, authorization, and user management for applications, with support for social login, single sign-on, and fine-grained access control.