Fupio is the easiest way to share online Learn more »

Daring Fireball

Give an agent an access token and it spreads: into the context window, into tool call logs, into notes it keeps between steps. Each copy works from anywhere, long after the fact.
Relay keeps the credential at WorkOS. Your agent names the user, WorkOS attaches that token, refreshes it, and releases it only to allowlisted hosts. A hijacked agent session is a live process you can kill.
Learn how it works →
★
https://workos.com/blog/delegated-access-for-ai-agents

16 hours ago

workos.comHow to let AI agents act on behalf of users without handing them access tokens — WorkOSAgents that call third-party APIs on behalf of users normally hold the OAuth access token. Here is where that token leaks, and how to get delegated access without it.