Don't give your agent the master key
summary
Claim: shipping any AI agent makes the product an identity company. The talk lays out five concrete primitives — agents as principals, Token Vault, fine‑grained auth, CIBA async consent and on‑behalf‑of delegation — and demos Knox built on the Vercel AI SDK performing four jobs (read email, search docs, book Japan, update calendar). Tokens are short‑lived and scoped, every call proves who acted, the audit trail shows seven actions (five allowed, two blocked), and human approvals stop a $7M 1500‑ticket mistake.
AI-written summary · about
chapters (9)
- 0:00The boring login guy, vindicated
- 1:39Five principles for trustworthy agents
- 5:05You're an identity company now
- 6:17One key, everything, forever
- 7:04Prompt injection: the token has to say no
- 8:20The five patterns
- 11:11Demo: Knox reads email, searches docs, books Japan
- 15:52The audit trail
- 16:32The hard part isn't intelligence, it's identity
related talks
19mDon't give your agent the master key
24mBuilding Trustworthy AI Authentication & Authorization for AI Agents
40mIn AI We Trust? Securing the Future, One Agent at a Time
01h 22mIdentity for AI Agents
29mHow Auth0 Secures AI Authentication & Authorization for AI Agents
20mCIAM for AI: Authn/Authz for Agents
25mAgents Are Not Users or Services: Securing AI Traffic with a New Identity Model
04mYou Don't Need a New Identity Platform for the AI Era