Last month, an AI agent in Denmark booked a coffee tasting and paid for it. Danske Bank and Mastercard called it the country's first payment made entirely by an agent. The customer still had to approve the purchase and confirm it with a passkey. Days later, Block brought Bitcoin Lightning to x402, the open standard that lets agents pay for APIs and data on their own.
The banks noticed. Six of them, including Bank of America and Capital One, published a set of principles for shopping agents. Their worries include impersonated agents and merchants, privacy leaks, and nobody clearly on the hook when an agent buys something it shouldn't.
Most of that comes down to identity. Who is the agent? Who sent it? What is it allowed to spend?
Today at 3:30 in Sutton, Kim Maida and Mason Egger run Secure, Durable Agents with Keycard and Temporal.
The thread picks up again Tuesday. The Intent Based Auth panel takes the Simons stage at 11:30. Kamil Potrec covers Agent Auth 101 at 2:30 in McCarthy. At 2:55 in Turing, Ishween Kaur walks through six attacks on x402 payments.
Sure, agents may have wallets, but someone still has to check their ID.
Comment below!
Top comments (1)
Bài viết chạm đúng vào nút thắt của agentic workflow: identity & authorization. Việc agent tự book và thanh toán qua Danske Bank cho thấy chuỗi trust đã được thiết lập end-to-end — từ identity verification, consent management, đến payment rail.
Điểm thú vị là họ xử lý agent identity như thế nào: dùng OAuth2/OIDC delegation hay issue credential riêng cho agent (VC/W3C DID)? Nếu là delegation, scope & expiry được kiểm soát ra sao khi agent chạy autonomous loop? Còn audit trail — log mỗi decision point để trace back khi dispute — có được baked in từ đầu không?
Một khía cạnh ít được nói: rate limiting & quota per agent identity. Nếu agent bị compromise hay runaway loop, bank có mechanism revoke/rotate credential real-time không? Đây mới là bài toán operation thực tế khi scale từ demo sang production.
Curious: team bạn có evaluate SPIFFE/SPIRE cho workload identity không? Hoặc dùng mTLS giữa agent ↔ bank API gateway? (site: labagent .tech)