Agent identity & access
Developer-facing authorization service from Auth0 that lets an AI agent call first-party and third-party APIs on behalf of an authenticated user using OAuth scopes, with Token Vault obtaining, storing and refreshing external API tokens. It governs user-delegated agent access, not enterprise-wide agent inventory.
commercial · unknown · Research snapshot 2026-09-06
Visit the official product source ↗Agent identity & access · Runtime authorization & controls
Useful conversation with: Application security engineer, Platform engineer, Product engineering lead.
Demonstrate an agent obtaining a Google and Slack token from Token Vault after user consent, and show what happens when the agent requests a scope the user never granted.
Support labels reflect the supplied research. Documentation and vendor claims are not independent product tests. “Not established” means the researcher did not find support; it does not prove a capability is absent.
Documented by provider
Auth0 issues access tokens that scope an AI agent's API calls to the permissions a user explicitly consented to, for first-party and third-party APIs.
Limit: Docs do not describe autonomous (no-user) agent identities or agent inventory.
Documented by provider
Token Vault obtains, stores and refreshes third-party API tokens so the agent never handles those credentials directly.
Limit: No documented list of guaranteed connectors or token retention controls on the fetched pages.
Listing does not imply partnership, supplier status, a working DutyGraph integration, or a compliance certification.
Suggest a correction