I-D Action: draft-mishra-oauth-agent-grants-02.txt

Internet-Draft draft-mishra-oauth-agent-grants-02.txt is now available.

   Title:   OAuth Profile for Delegated AI Agent Authorization
   Author:  Sanjeev Kumar
   Name:    draft-mishra-oauth-agent-grants-02.txt
   Pages:   19
   Dates:   2026-08-30

Abstract:

   AI agents increasingly invoke protected APIs on behalf of human
   users.  This document defines an OAuth profile for identifying an
   agent client instance, obtaining an authenticated user's consent,
   issuing resource-bound and sender-constrained access tokens,
   attenuating authority through OAuth Token Exchange, and rotating
   refresh tokens safely.  The profile uses existing OAuth and JOSE
   mechanisms wherever possible and defines no new JWT claims or OAuth
   endpoints.  Operational facilities such as policy engines, audit
   stores, budgets, event streams, and credential vaults are outside the
   interoperable core.  Grantex is an incomplete reference
   implementation and is not required for conformance.

The IETF datatracker status page for this Internet-Draft is:
https://datatracker.ietf.org/doc/draft-mishra-oauth-agent-grants/

There is also an HTMLized version available at:
https://datatracker.ietf.org/doc/html/draft-mishra-oauth-agent-grants-02

A diff from the previous version is available at:
https://author-tools.ietf.org/iddiff?url2=draft-mishra-oauth-agent-grants-02

Internet-Drafts are also available by rsync at:
rsync.ietf.org::internet-drafts


_______________________________________________
I-D-Announce mailing list -- [email protected]
To unsubscribe send an email to [email protected]