Security and control
Security and control
Articles on security and control for teams building AI agents that act in real apps.
- Security and control
OAuth for AI agents: handling tokens without leaking them
How to use OAuth safely with AI agents: authorization code with PKCE, least-privilege scopes, refresh rotation, token storage, revocation and reauth flows.
-
Security and control
Human approval for AI agents: design it so people use it
How to design human approval for AI agents: risk tiers, previews of the exact action, expiry, safe retries, fewer alerts, an audit trail and undo.