Vibe Check: Agents don't need your password. They need your permission.
Owlcast by M Warrick
Episode notes
Watch the video version for the demos and screen shares: https://www.youtube.com/live/P5yfNwcGGUA
Jess Temporal, Senior Developer Advocate at Auth0, joins Melanie and co-host Ian Douglas to tour the agentic arcade she built, where every game sits behind a different auth requirement. The through-line: the user authenticates - the agent never does. It borrows narrowly scoped permission instead.
We get into:
- Why the user gets authenticated, not the agent - keeping auth on the deterministic side of a non-deterministic system
- Scoped tokens: the tool decides scope, not the LLM - plus token expiry and refresh inside a live agent session
- Token Vault and calling third-party APIs like Google Calendar on a user's b ...