@jaredhanson

Co-founder @keycardai. 🛠️ @passportjs. ❤️ HTTP 401-403. #openid #oauth #wimse #mcp #x402

 San Francisco, CA
jaredhanson.me/
Joined July 2006
  • Tweets6.4K
  • Following2.3K
  • Followers3.2K
32Media
We've spent a lot of time at @KeycardAI thinking about how authentication and authorization need to evolve as agents take on more work. API keys and OAuth scopes were never designed to account for tasks, delegation between agents, or agents acting on their own. I wrote about how we're approaching this and what we think needs to change. keycard.ai/blog/defining-aut…

For every action, the right access: defining auth for agents — Keycard

Every agent action should get exactly the access it needs, only when it needs it. Here's what it takes to get there, from full context to enforcement.

keycard.ai
2
8
4
39
3,682
If you treat your code base as an agent’s memory, pace of development starts to really fly.
1
8
474
Reading through the PACT spec tonight. The time is now to solve these problems, so it’s great to see a proposal. Unfortunately, it’s hampered by the ahead-of-time registration requirement that plagues all OAuth-based integrations. openpactprotocol.org

What is PACT? - PACT

The Personal Agent Consent & Trust Protocol (PACT) lets a personal agent contact a Brand's support agent with a verifiable identity and only the permissions the User granted.

openpactprotocol.org
1
11
490
Personal agents and PACT are practically screaming for an open web approach that avoids pre-registration. AAuth is here and solves that problem!
2
3
98
For years, clients have either been anonymous or pre-registered. Agents break that model. We need a way for agents to show up on the open web, establish who they are, interact and transact, and bring a human into the loop when they need more access. Really excited about the Personal Agent Protocol announcement today and how closely it aligns with the work we’ve been doing at @KeycardAI across MCP, A2A, AAuth, and federated agent identity.
Sierra
@SierraPlatformOct 6
Today we’re announcing Personal Agent Protocol — an open standard @Meta and @SierraPlatform are developing along with industry partners at @Genesys, @instinct, @RocketOTD, @Shopify, @stripe, and @Walmart. It will help define how personal agents interact with businesses and is open for anyone to implement. Read more: sierra.ai/blog/introducing-p…
1
3
1
12
1,265
It took AI to make me love TypeScript.
5
13
569
Excited to see the first published spec of Personal Agent Protocol later this month! It is right in line with what we at @KeycardAI are building with extensions to OAuth and emerging protocols like AAuth. DMs are open for anyone building services for personal AI to connect to. sierra.ai/blog/introducing-p…

Introducing Personal Agent Protocol

We’re excited to announce Personal Agent Protocol — an open standard Meta and Sierra are developing along with industry partners at Genesys, Instinct, Rocket, Shopify, Stripe, and Walmart that...

sierra.ai
2
10
640
OAuth is tying itself in knots trying to turn clients into federated actors. AI agents need that capability. This is why I’m excited about AAuth.
2
7
540
more replies
That said, much like new cloud architecture gave rise to SAML over LDAP, and web 2.0 and mobile brought OAuth and OpenID, the timing and demands of AI create the right moment where a new protocol can emerge.
1
72
And whether it’s AAuth or OAuth, one thing is clear: you will need to control and manage agents as they work - across the web - for you or your company.
1
59
LLMs can be very insightful. But their writing style (I’m looking at you Claude) can make those insights hard to follow. I often find myself rereading prior chats and noticing important bits I overlooked.
1
6
340
Anyone else struggle with this? Any tips for making them write more clearly?
2
1
76
Language is both the oldest technology and the newest technology. This is what makes AI so magical, indicating its potential.
4
192
Reading Claude’s written English feels a bit like reading English from over a century ago. The same language, but yet distinctly different. Some emergent new culture shift.
1
230
I find myself switching to terminal command lines, and mistakenly typing prompts. How long till the shell is just an LLM?
3
11
997
I love auto mode, but sometimes worry it’s just YOLO mode renamed.
1
2
260
The discussions around agentic coding (factories, slop, etc) parallel the same discussions about how to effectively build software with humans. Agents work at machine speed, which magnifies the problems.
2
9
326
Load more