Security
When an AI Agent Calls Another API, Which Identity Crosses the Boundary?
Map every identity handoff in an AI agent’s call chain. Exchange tokens for each downstream API, preserve user and agent identities, and reject mismatched audiences or excessive scopes.