AI AGENT IDENTITY: IT'S JUST OAUTH

Summary from the TLDR InfoSec newsletter

OAuth provides the perfect model for authenticating AI Agents as it is designed for auditable and secure delegation of access. OAuth adoption is scant and even where it exists, scopes are often very minimal and incomplete. This solution doesn't scale to tools where the AI is acting as the user's identity such as ChatGPT Desktop or Claude computer use.