Agent authorization, explained

What AI agent authorization means, why API keys and RBAC fall short, and how capability tokens (warr

A capability token grants authority by possession: holding it lets you do exactly what it encodes, n

Macaroons and biscuits are attenuable authorization tokens: the holder can add caveats to narrow the

Attenuation is narrowing a token’s authority by adding restrictions the holder can’t undo. It makes

A Liceat warrant is a scoped, attenuable, offline-verifiable, revocable capability token for AI agen

Proof-of-possession binds a token to a holder’s key so a stolen copy is useless. Liceat warrants can

A transparency log is an append-only, cryptographically verifiable record. Liceat logs every agent d

Non-equivocation means a log operator can’t show two different histories to different parties. Licea

x402 revives HTTP 402 Payment Required for machine payments: a server returns payment terms, the cli

Give AI agents a verifiable, resolvable identity with on-log attestations and reputation — so other

Verify an AI agent’s warrant with no network call — check the signature chain and caveats locally ag

The principle of least privilege applied to AI agents: grant each agent only the resources, actions,

Issue W3C Verifiable Credentials (JWT-VC) about AI agents with a did:web issuer, backed by an inclus

How to keep authority bounded across a multi-agent system where agents delegate to agents: attenuabl