AI product

AAuth

AAuth is an HTTP authorization protocol for AI agents, created by Dick Hardt, that gives each agent a cryptographic identity and lets it call protected resources using signed requests instead of API keys or bearer tokens. It carries identity and authorization claims in the same token, supports five access modes including per-call authorization, and supports identity-based, person-server-mediated, resource-managed, and federated flows. AAuth is designed for agents that select tool chains at runtime, need authorization decisions during a task, and operate across trust domains; it coexists with OAuth 2.0 and OpenID Connect rather than replacing them. The framework also introduces mission-level goals and budgets for constraining an agent's actions and resource consumption.

Visit site Mentioned in 1 video ↓

What AAuth is used for

1 use taken from transcripts — each links to the moment in the video.

  • An authorization framework for agents created by Dick Hardt (co-creator of OAuth). It introduces concepts like missions (big-picture goals that context-bound authorization decisions), budgets that limit how much resource an agent can consume instead of blunt rate limits, and running agents without API keys.

Videos mentioning AAuth

1 in the library.