Architecture Development Notes

Sep 11, 2026 · Artificial Intelligence

Agent Delegation Identity: Building Auditable Chains for Tool Authorization

This article explains why AI agents need distinct delegated identities with auditable chains instead of shared secrets or user impersonation, detailing OAuth 2.0 Token Exchange (RFC 8693) act claims, nested delegation chains as audit evidence not authorization, MCP's resource indicator requirements, and practical patterns from Gravitee and Microsoft Entra Agent ID.