Or Weis

Unrelenting entrepreneur
Founder of @permit_io, @Rookoutlabs, @Reactful

Permissions for the AI Era
(

[Or Weis @OrWeis]

@kenwarner @better_auth Given https://t.co/kDqbnnWfCK a try?

[Or Weis @OrWeis]

@mluggy @ForterGlobal @permit_io Thank you, made my day 🙏

[Or Weis @OrWeis]

@zeeg @rookout You're right that that US entity being a parent is a prerequisite but not enough by itself, you also need good tax lawyers

[Or Weis @OrWeis]

@Trying__IT Awesome thread.
For those who are looking to dive deeper here's an article comparing all three: https://t.co/8zeOhgNiHQ

[Or Weis @OrWeis]

Is 2026 the year Check Point dies? https://t.co/Uc27WZHCDl

Join me on a journey with Check Point as our protagonist, which will actually tell you the wider story of where the Agentic AI security market is headed.

[Or Weis @OrWeis]

@0xMaxSF @jfbrly @jancurn 100%.
Hope to solve this for everyone with https://t.co/GwX8unNo0Q (authN + AuthZ + Consent drop-in).
Aiming for GA self-service in a few weeks.

[Or Weis @OrWeis]

@MaltheJorgensen 100%
But it can be easy to add fine-grained permissios- we (@permit_io) are here to help :)

[SurrealDB @SurrealDB]

.@permit_io provides full-stack authorisation-as-a-service for the AI era. But its internally developed engine for Open Policy Agent (OPA) hit scale limits. Learn how SurrealDB's multi-model capabilities enabled it to overcome these challenges and keep innovating. 👉 https://t.co/dmgIe4fH0N

[Or Weis @OrWeis]

@matheeuspoleza Thank you. You made my day 🙏

[Or Weis @OrWeis]

@AttiSzeka Yes, of course.

[Or Weis @OrWeis]

This framing helps us consider identity, delegation, and consent in a world where the “ship” may change mid-voyage, but the journey continues 🛳️ . Curious how you see it, let me know your thoughts in the comments!

https://t.co/mxvmigWEEX

[Or Weis @OrWeis]

@okta recently hosted its Identity Summit on Securing Agentic AI, where they introduced their new Cross App Access protocol.

But let’s be clear- Agentic AI is not just “apps talking to other apps”

In my latest Substack, I explore The Agentic AI Ship of Theseus:

[Or Weis @OrWeis]

@ravisvats @permit_io @auth0 ;-) https://t.co/7jT3q4EYUP

[Or Weis @OrWeis]

@matheeuspoleza Ways for Single Sign On / Enterprise login:
OIDC (Open Id connect)
SAML(Security Assertion Markup Language)
LDAP(Lightweight Directory Access Protocol)

SCIM (System for Cross-domain Identity Mgmt) - Way to push identities between two systems

XACML - derelict Policy Language

[Or Weis @OrWeis]

@matheeuspoleza Yeah it can be much - but it's really less complicated than it seems - most of these are easily grouped.
Policy types:
RBAC - Role based Access Control
ABAC - Attribute based (conditions)
ReBAC - Relationship based (connections)

IAM - Identity Access Management

...

[Or Weis @OrWeis]

@juanvierag @marlene_zw Sorry for the late response; You do need a protocol for this if you want the context to be dynamic or transformative on-top of an API; and besides I'd say having the "manual" embedded would have been a good idea for us humans as well. UTCP is cool, but MCP is more forwardthinking