AI agents are almost ready to automate web tasks. Think booking travel to deploying code to everything in between. We don’t have a good way to creat

Towards an AI-Native Auth Framework - by Dex Horthy

submited by

Style Pass

2024-12-02 19:30:03

AI agents are almost ready to automate web tasks. Think booking travel to deploying code to everything in between. We don’t have a good way to create a personal and secure environment which can run tasks.

At the end of the day, this requires a deep rethinking of how auth happens on the web, because 99% of the internet doesn’t even do OAuth today. And the sites that do don’t support the level of granularity that you probably want for this kind of stuff

3. OAuth - decent standard but very few sites support programmatic auth, and even fewer have the controls for short-lived or tightly scoped access

None of these approaches provide the portability needed for AI agents to safely interact across the web. Even OAuth, while providing a standardized protocol, wasn't designed with the fine-grained, single-operation permissions that AI agents require to safely operate across different services and platforms.

The challenge here is that while you have programmed your browsing agent to e.g. fill out a form, and then wait for permission to hit submit, you're relying on