Mandate compiles CRM fields and time limits into self-expiring WebMCP agent tools

OpenAIDevs · x · 2026-09-29

Mandate, a Devpost project, rethinks agent permissions: OAuth scopes and RBAC are always configured in advance by admins, and credentials outlive their tasks by default. Real delegation is moment-specific — 'update just these two fields until I'm back.' Mandate uses WebMCP to compile user-selected CRM records, fields, and a time limit into a temporary, live tool that expires automatically and is re-checked by the server on every call. In the demo the agent deliberately stops and hands the apply step to a human.

Original post →

More from coding & agent

coding & agent channel →