Auth0 Lab

Exploring the future of identity:
Community Discord:

[Auth0 Lab @Auth0Lab]

Auth0 Lab: UI Components 🚀 - We're excited to share that we've open-sourced our latest experiment on UI components!

[Auth0 Lab @Auth0Lab]

@yenkel another big swing from the lab team :)

[Auth0 Lab @Auth0Lab]

new Lab experiment: want to prove there is a human behind an agent? sign up for the Beta👇

[yenkel @yenkel]

everyone wants their product to work with AI agents. but no one wants their product to be abused. and let's be honest: AI means more + better "bad bots"

we are building a product that can help you, by letting you verify there's a real human behind AI agents. we think it'll be really useful for:
- dev products
- e-ticketing
- agent credit cards
- social networks

we are starting a private Beta of Human Principal with a few companies that want to integrate and give us feedback.

interested? https://t.co/l5lml4DIEq

[Auth0 Lab @Auth0Lab]

🤖 enable agents
🛑 reduce abuse
⏳ enforce limits

[yenkel @yenkel]

Today we joined @tiagosada and @worldnetwork on stage to unveil what we've been working on @okta: Human Principal

Let's dive in 👇

Dev products with free offerings and social media platforms are vulnerable to abuse. AI makes scaled abuse and fraud easier than ever. As agents continue to go mainstream, these problems are expected to exacerbate. Without a way to distinguish the human behind agents, other options can be aggressively rate-limiting or per-product heavyweight KYC processes, both of which add friction, can introduce data privacy risks, and undermine the value of automated agentic workflows.

*Human Principal will allow API builders to verify whether a human stands behind an agent and its actions, and enforce policies accordingly. Humans will be able to verify themselves using a number of verification methods, and obtain device-bound cryptographic proof that carries across products without requiring cumbersome re-verification.

@world_id, slated to become one of the first Human Principal integration partners, is set to provide Human Principal a privacy-preserving, user-friendly, and ubiquitous proof of human verification method. This will enable features like rate limits per human for agent traffic, abuse-protected free tiers, and a cleaner onboarding flow for agents that need to access services on behalf of their human principal.

The waitlist to join the upcoming Human Principal beta is now open at https://t.co/l5lml4DIEq

*Forward-looking statements apply https://t.co/BJdPZnEtEW

[Eli Rabek @erabek]

Camp AI is going on tour 🌎

6 cities. 5 months. Startup demos, panels, and ghost stories about what your agents did when no one was watching.

First stop: SF on May 7. NYC, London, and more soon!

Presented by @Auth0. Will add links in 🧵as we announce each city! #Auth0CampAI

[Auth0 Lab @Auth0Lab]

building for agents 👇

[yenkel @yenkel]

agents need to know how much your product costs. AX 101

https://t.co/x8wAfGwWg0

thx for the idea @zenorocha

[Auth0 Lab @Auth0Lab]

@yenkel indeed

[Auth0 Lab @Auth0Lab]

new experiment, check it out!

[yenkel @yenkel]

your users want agents that know about them. their past chats, preferences, habits, needs, etc.

so we've been experimenting with agent memory at @Auth0. to enable you to build agents that act on users' behalf, the way your users expect

interested? DM me or @jcenturion86

[Thorsten Ball @thorstenball]

Someone please solve auth for agents.

[yenkel @yenkel]

agent identity and access control is a big problem. openclawd makes it very evident :)

a lot moltbook not knowing who is behind usage is that a lot of keys are api keys vs user bound tokens.

there's no openclawd account (nor should there be just for its own sake). identity is relevant and necessary depending on use cases. rate limiting is a very common use case to push for identity

but the question becomes: what do you limit on? e.g. can someone have 1000 clankers if they are a "real person" and is each unlimited? does a person get a quota and the quota gets split amongst clankers?

the identity approach you choose depends on what you need it for. @worldcoin real world identity comes in handy (much like @X verification) because you want to baes it on real world scarcity, not just an agent's "private key"

btw @auth0 we’ve done a bunch of stuff with https://t.co/MMZyo6wPSF and there is more coming. if you are dealing with agents, auth, identity, access control hmu. would love to chat

[yenkel @yenkel]

❤️ seeing another tech company join the "Labs" trend @GoogleLabs was a pioneer and more recently
- @cloudflare has "emerging tech" formerly lead by @dok2001
- @GitHubNext at github
- @stripe has a team lead by @jeff_weinstein
- at Auth0 we have @Auth0Lab

and now @AnthropicAI

[Auth0 @auth0]

Today is a great day for open standards and AI, and at @Auth0, we’re all in on both.

We’re excited to join the Agentic AI Foundation (AAIF) with @Okta and keep working with the community to help builders create safer, more capable AI systems.

[yenkel @yenkel]

sign in with @vercel enables every dev to build on top of the AI cloud

naturally, builders using @auth0 will be able to support it for their apps

@nextjs app with "Sign in with Vercel" 👇. thanks @okbel for the last mile assist!

code for `setup_auth0_vercel.sh` in reply

[Auth0 Lab @Auth0Lab]

we'd love to hear your ideas 👇

[yenkel @yenkel]

what new products/features would you love @auth0 to offer? starting to think about 2026 @Auth0Lab

[Auth0 Lab @Auth0Lab]

can’t wait! we have a bunch of cool experiments planned for 2026

stay tuned!

[yenkel @yenkel]

an amazing engineer just signed an offer to join the @Auth0Lab team

super excited! smart guy, good person, ships a lot, loves to code. excited for what he’ll bring to the team

great way to wrap up the week. cheers 🥃

[Auth0 Lab @Auth0Lab]

from the Lab 🧪 to GA🎉

looking forward to seeing companies of all sizes secure their AI apps and agents with @auth0

[Auth0 @auth0]

Auth0 for AI Agents is GA.

Smart agents are easy. Trusted agents are what matter. 🔐

User Auth, Token Vault, Async Auth, FGA for RAG — all built for secure, production AI.

Learn more here 👇 https://t.co/2IafpJ9p74

[Auth0 Lab @Auth0Lab]

wdyt? should we go for it?

[yenkel @yenkel]

every week a new MCP gateway product is announced

should we just build one @auth0? starting to feel FOMO

[Auth0 Lab @Auth0Lab]

happy to see a Lab project make it this far! 🥂 to more success

[yenkel @yenkel]

some exciting news 🗞️

5 years ago we set out to redefine how devs approach authorization at scale, and a few months later decided to open source the core of @auth0 FGA and donate it to @CloudNativeFdn

I am humbled by what has happened since. the project we created is being used by companies like @grafana, @sourcegraph, @canonical and @docker

… and now exciting news: @openfga has reached CNCF incubation stage!!

congratulations to @aaguiar and the rest of the OpenFGA commmunity for this amazing milestone!

[yenkel @yenkel]

another year, another @auth0lab team offsite (+ featured guests)

extremely happy and grateful to have met these folks 10+ years ago and to continue working with them ❤️

we miss you @woloski

[Sandrino Di Mattia @sandrinodm]

🚀 Just launched: https://t.co/00kH6pPJ6Z

The ecosystem of agentic AI protocols and standards is expanding rapidly: MCP, A2A, AP2, XAA... Things are moving fast. This directory helps you keep up.

[yenkel @yenkel]

there are many issues here

one or them the tool is doing auth via hardcoded api keys, not getting tokens scoped to users per tx (eg via oauth)

@auth0 can help address this, both token vault and potentially async authz (depending on implementation)