Per request OAuth2 scope derivation for AI agents. Narrows an agent's standing authority down to what a single delegated request needs, using RFC 8693 token exchange against WSO2 Agent Manager and ThunderID.
golang jwt oauth2 wso2 delegation authorization ai-agents zero-trust least-privilege token-exchange opentelemetry rfc8693 agent-identity rfc8707 thunderid scope-derivation
-
Updated
Sep 19, 2026 - Go