AI Agents Need Authenticated Delegation

This position paper proposes that the widespread deployment of AI agents necessitates authenticated delegation to address challenges in authorization, accountability, and access control. The authors suggest extending existing OAuth 2.0 and OpenID Connect protocols with AI-specific credentials and delegation mechanisms, allowing users to securely grant specific authorities to AI agents. This framework aims to ensure AI agents act within defined permissions and scope limitations, enhancing security and providing clear chains of accountability. The paper explores how natural language permissions can be translated into auditable access control rules, highlighting the legal implications and practical benefits of such a system for managing AI interactions in various digital environments.