oauth

We shipped an MCP server where agents inherit human identity, implementing OAuth 2.1 federation and per-IdP claim mappers to solve agent identity management and RBAC policy evaluation.

Discussion of best practices for storing and managing OAuth tokens used by AI agents to call third-party services, covering token refresh, revocation, and scope drift.

xAI's SuperGrok subscription now integrates with Hermes Agent via OAuth, enabling access to Grok 4.3, text-to-speech, image/video generation, and X search without separate API keys or billing.

Hermes Web UI updated to v0.5.28, adding xAI Grok OAuth login with support for SuperGrok subscriber authorization, and introducing Bridge session-level model settings and other improvements.

Clawvisor is a new authorization layer for AI agents that enables secure access to apps like Gmail and Slack without exposing credentials or allowing rogue actions, solving key safety issues in agent deployment.

A Roblox cheat infected a Context.ai employee with Lumma Stealer, which led to compromised OAuth credentials being used to breach Vercel's internal systems, exposing non-sensitive environment variables and highlighting risks of broad AI tool OAuth permissions.

Corsair is an open-source product integration platform that provides a unified syntax for connecting various third-party APIs, suitable for agents, backend services, and user dashboards.

Logto is an open-source auth infrastructure for SaaS and AI apps, supporting OIDC, OAuth 2.1, SAML, multi-tenancy, enterprise SSO, and RBAC.