everyone wants their product to work with AI agents. but no one wants their product to be abused. and let's be honest: AI means more + better "bad bots"
we are building a product that can help you, by letting you verify there's a real human behind AI agents. we think it'll be really useful for:
- dev products
- e-ticketing
- agent credit cards
- social networks
we are starting a private Beta of Human Principal with a few companies that want to integrate and give us feedback.
interested? https://t.co/l5lml4DIEq
Today we joined @tiagosada and @worldnetwork on stage to unveil what we've been working on @okta: Human Principal
Let's dive in π
Dev products with free offerings and social media platforms are vulnerable to abuse. AI makes scaled abuse and fraud easier than ever. As agents continue to go mainstream, these problems are expected to exacerbate. Without a way to distinguish the human behind agents, other options can be aggressively rate-limiting or per-product heavyweight KYC processes, both of which add friction, can introduce data privacy risks, and undermine the value of automated agentic workflows.
*Human Principal will allow API builders to verify whether a human stands behind an agent and its actions, and enforce policies accordingly. Humans will be able to verify themselves using a number of verification methods, and obtain device-bound cryptographic proof that carries across products without requiring cumbersome re-verification.
@world_id, slated to become one of the first Human Principal integration partners, is set to provide Human Principal a privacy-preserving, user-friendly, and ubiquitous proof of human verification method. This will enable features like rate limits per human for agent traffic, abuse-protected free tiers, and a cleaner onboarding flow for agents that need to access services on behalf of their human principal.
The waitlist to join the upcoming Human Principal beta is now open at https://t.co/l5lml4DIEq
*Forward-looking statements apply https://t.co/BJdPZnEtEW
Camp AI is going on tour π
6 cities. 5 months. Startup demos, panels, and ghost stories about what your agents did when no one was watching.
First stop: SF on May 7. NYC, London, and more soon!
Presented by @Auth0. Will add links in π§΅as we announce each city! #Auth0CampAI
your users want agents that know about them. their past chats, preferences, habits, needs, etc.
so we've been experimenting with agent memory at @Auth0. to enable you to build agents that act on users' behalf, the way your users expect
interested? DM me or @jcenturion86
agent identity and access control is a big problem. openclawd makes it very evident :)
a lot moltbook not knowing who is behind usage is that a lot of keys are api keys vs user bound tokens.
there's no openclawd account (nor should there be just for its own sake). identity is relevant and necessary depending on use cases. rate limiting is a very common use case to push for identity
but the question becomes: what do you limit on? e.g. can someone have 1000 clankers if they are a "real person" and is each unlimited? does a person get a quota and the quota gets split amongst clankers?
the identity approach you choose depends on what you need it for. @worldcoin real world identity comes in handy (much like @X verification) because you want to baes it on real world scarcity, not just an agent's "private key"
btw @auth0 weβve done a bunch of stuff with https://t.co/MMZyo6wPSF and there is more coming. if you are dealing with agents, auth, identity, access control hmu. would love to chat
Today is a great day for open standards and AI, and at @Auth0, weβre all in on both.
Weβre excited to join the Agentic AI Foundation (AAIF) with @Okta and keep working with the community to help builders create safer, more capable AI systems.
sign in with @vercel enables every dev to build on top of the AI cloud
naturally, builders using @auth0 will be able to support it for their apps
@nextjs app with "Sign in with Vercel" π. thanks @okbel for the last mile assist!
code for `setup_auth0_vercel.sh` in reply
an amazing engineer just signed an offer to join the @Auth0Lab team
super excited! smart guy, good person, ships a lot, loves to code. excited for what heβll bring to the team
great way to wrap up the week. cheers π₯
Auth0 for AI Agents is GA.
Smart agents are easy. Trusted agents are what matter. π
User Auth, Token Vault, Async Auth, FGA for RAG β all built for secure, production AI.
Learn more here π https://t.co/2IafpJ9p74
some exciting news ποΈ
5 years ago we set out to redefine how devs approach authorization at scale, and a few months later decided to open source the core of @auth0 FGA and donate it to @CloudNativeFdn
I am humbled by what has happened since. the project we created is being used by companies like @grafana, @sourcegraph, @canonical and @docker
β¦ and now exciting news: @openfga has reached CNCF incubation stage!!
congratulations to @aaguiar and the rest of the OpenFGA commmunity for this amazing milestone!
another year, another @auth0lab team offsite (+ featured guests)
extremely happy and grateful to have met these folks 10+ years ago and to continue working with them β€οΈ
we miss you @woloski
π Just launched: https://t.co/00kH6pPJ6Z
The ecosystem of agentic AI protocols and standards is expanding rapidly: MCP, A2A, AP2, XAA... Things are moving fast. This directory helps you keep up.
there are many issues here
one or them the tool is doing auth via hardcoded api keys, not getting tokens scoped to users per tx (eg via oauth)
@auth0 can help address this, both token vault and potentially async authz (depending on implementation)