Blog

3 min read

Best Practices

Top Risks of Using AI Agent Identities

AI agents need identity controls, scoped access, and runtime enforcement before they are trusted with production systems.

Aembit Engineering

Industry Insights

How AAuth Brings Human Approval Into AI Agent Authorization

A new protocol proposes a clearer way to connect agent identity, delegated authority and human approval for sensitive actions. AAuth is an authentication and authorization protocol for AI agents inspired by OAuth and OIDC. It authenticates and authorizes agents without the need for a human; it lets agents act on behalf of humans with a separate set of credentials (delegation), and optionally supports human approval before granting access (human in the loop).

Víctor Jiménez

13 min read

Product Updates

Aembit Adds Workload Identity Federation Support for the Claude API

Aembit’s new Credential Provider automates Claude API Workload Identity Federation, retiring static keys for short-lived tokens.

Ashur Kanoon

5 min read

Best Practices

MCP, OAuth 2.1, PKCE, and the Future of AI Authorization

The MCP authorization spec sets a new standard for securing non-human AI agents – with lessons for anyone building autonomous, scalable systems.

Kevin Sapp

7 min read

Breach Analysis

The AI Agent Was Trying to Win: The Identity and Access Failure Behind the Hugging Face Breach

An exercise ended with frontier models inside a platform’s production systems, exposing a hard truth about what agents can do with credentials that systems trust.

Dan Kaplan

3 min read

Industry Insights

10 Identity Security Vendors for AI Agents: Strengths, Tradeoffs and How They Fit

Compare 10 identity security vendors for AI agents, including where each fits and what buyers should examine before choosing.

Dan Kaplan

Industry Insights

Squares and Rectangles: Why AI Agents Can’t Be Treated Like Regular Workloads

AI agents are workloads, but traditional workload identity alone can miss the user, task, and runtime context needed to govern dynamic agent access.

Emma Zaballos

4 min read

Best Practices

What Is OAuth? A Guide to Tokens, Scopes, and AI Agent Access

As AI agents begin calling tools and APIs, OAuth moves from background plumbing to a core access-control question.

Aembit Engineering

Best Practices

Secure Agentic Access: Authentication and Authorization for AI Agent Workloads

AI agents need more than working credentials. They need verifiable identity, task-scoped access, and clear attribution.

Ashur Kanoon