Changelog

Agent Auth

September 2, 2026
Agent AuthAgent Auth

The agents you're building into your product need identities and credentials. Until now the options were bad. Either hand them a long-lived API key or let them borrow a user's session. Agent Auth, now in early access, gives your agents real identities in AuthKit. Define blueprints for what an agent is allowed to do, and it gets short-lived, tightly scoped tokens every time it runs.

Agents access can be delegated on behalf of an user or they can act autonomously with scoped-access within an organization. Every token identifies the agent, the user or org it's acting for, and its own permissions. If needed, you can revoke sessions instantly. Get in touch via email or Slack to try it and learn more in the docs.