I-D Action: draft-sweeney-wimse-credential-delegation-00.txt

Internet-Draft draft-sweeney-wimse-credential-delegation-00.txt is now
available.

   Title:   Credential Delegation Protocol for AI Agents in Multi-System Environments
   Author:  Kieran Sweeney
   Name:    draft-sweeney-wimse-credential-delegation-00.txt
   Pages:   22
   Dates:   2026-07-27

Abstract:

   Autonomous AI agents increasingly require access to protected
   resources across multiple service providers on behalf of human users.
   Existing OAuth 2.0 extensions address individual aspects of this
   problem (token exchange, proof-of-possession, and structured
   authorization) but no current specification defines how these
   mechanisms compose into a coherent credential delegation framework
   for AI agents.

   This document specifies the Credential Delegation Protocol: a profile
   of OAuth 2.0 Token Exchange (RFC 8693), Demonstrating Proof-of-
   Possession (RFC 9449), Rich Authorization Requests (RFC 9396), and
   Client-Initiated Backchannel Authentication (OpenID Connect CIBA)
   that enables human users to delegate scoped, attenuated credentials
   to AI agents operating across heterogeneous service providers.

   The protocol defines: agent identity lifecycle management using
   ephemeral key pairs; capability-shaped delegation tokens bound to
   specific operations and resources; credential wrapping semantics that
   prevent exposure of underlying OAuth tokens to agents; consent-gated
   delegation flows for asynchronous agents; real-time cascading
   revocation; and tamper-evident audit chains.

   This document does not define new token formats, new OAuth grant
   types, or modifications to existing authorization server behavior.
   It specifies how existing mechanisms are combined to achieve secure,
   auditable credential delegation for AI agents.

The IETF datatracker status page for this Internet-Draft is:
https://datatracker.ietf.org/doc/draft-sweeney-wimse-credential-delegation/

There is also an HTMLized version available at:
https://datatracker.ietf.org/doc/html/draft-sweeney-wimse-credential-delegation-00

Internet-Drafts are also available by rsync at:
rsync.ietf.org::internet-drafts


_______________________________________________
I-D-Announce mailing list -- [email protected]
To unsubscribe send an email to [email protected]