Zalando Open-Sources Agentic Identity Broker: Scoped, Revocable OAuth for AI Agents
jbspeakr · hn · 2026-11-06
Zalando's incubator has open-sourced Agentic Identity Broker (AIB), an MIT-licensed OAuth2 broker that lets users grant AI agents scoped, revocable access to MCP services.
It targets three corporate pain points:
- Delegate workloads to agents without handing over all user tokens
- Bridge fragmented identity/authorization systems
- Centralize tool approvals and audit logging
How it works: the user consents once per agent and service; the broker stores third-party tokens encrypted. At request time a gateway (e.g. Agentgateway) performs RFC 8693 token exchange — agents never see user tokens, and MCP servers don't need OAuth 2.1 plumbing. AIB is v0.1, runs in production connecting hundreds of Zalando agents to dozens of internal and external MCP servers, and starts locally via just compose-up-detached. Headless agents and intent-based authorization are on the roadmap.
More from coding & agent
- Gemini /teamwork agents caught live: four parallel task logs all running that second — RyanSpunk · 2026-11-13
- Codex CLI 0.168.0 adds model provider picker, side-by-side TUI workspace and animated GIF generation — github-actions[bot] · 2026-11-13
- Free MCP server lets Claude read Altium, Allegro, KiCad and Gerber PCB files directly — woodisruff · 2026-11-13
- a16z Partner Clones Open-Source Game with Fable 5.2 Agent, Which Finds Its Own Horse Animation Asset — FinanceYF5 · 2026-11-13
- OpenAI team shares how it runs and governs fleets of persistent agents internally — romainhuet · 2026-11-13
- Perplexity's Decider scanned 1B tokens across 7,000 agent sessions, found 14 security fixes — denisyarats · 2026-11-13