Better Agent Auth — Bereket Habtemeskel & Paola Estefania, Better Auth

Well, hello everyone. Can you hear me Well, hello everyone. Can you hear me all? Okay. Yes. Perfect. Well, welcome all? Okay. Yes. Perfect. Well, welcome all? Okay. Yes. Perfect. Well, welcome to our talk, our workshop actually. Um, to our talk, our workshop actually. Um, to our talk, our workshop actually. Um, I know maybe you were expecting uh I know maybe you were expecting uh I know maybe you were expecting uh Burgett also. he couldn't come but we Burgett also. he couldn't come but we Burgett also. he couldn't come but we make this workshop together for you. make this workshop together for you. make this workshop together for you. Okay. So as you see you have there a QR Okay. So as you see you have there a QR Okay. So as you see you have there a QR code you can go ahead and go there is um code you can go ahead and go there is um code you can go ahead and go there is um our page for Asian health protocol so our page for Asian health protocol so our page for Asian health protocol so that you have it and I don't have to that you have it and I don't have to that you have it and I don't have to spell it for you. Um, okay. So, my whole spell it for you. Um, okay. So, my whole spell it for you. Um, okay. So, my whole idea today is instead of like me telling idea today is instead of like me telling idea today is instead of like me telling you stuff and you do this and show you you stuff and you do this and show you you stuff and you do this and show you how to do stuff, I want us to take one how to do stuff, I want us to take one how to do stuff, I want us to take one hour at least to think about Asian hour at least to think about Asian hour at least to think about Asian security, Asians because sometimes we security, Asians because sometimes we security, Asians because sometimes we are excited about like this new AI era, are excited about like this new AI era, are excited about like this new AI era, right? But we never think about or maybe right? But we never think about or maybe right? But we never think about or maybe yes, but not as much as I wished. yes, but not as much as I wished. yes, but not as much as I wished. What happens when you for example say What happens when you for example say What happens when you for example say hey agents what are my maybe my schedule hey agents what are my maybe my schedule hey agents what are my maybe my schedule for tomorrow what are send an email have for tomorrow what are send an email have for tomorrow what are send an email have you ever thought of this how many of you you ever thought of this how many of you you ever thought of this how many of you like raise your hand like how many of like raise your hand like how many of like raise your hand like how many of you use AI agents every day okay higher you use AI agents every day okay higher you use AI agents every day okay higher don't be shy okay great how many of you don't be shy okay great how many of you don't be shy okay great how many of you give them access to your Gmail to your give them access to your Gmail to your give them access to your Gmail to your calendar to your personal accounts how calendar to your personal accounts how calendar to your personal accounts how many of you oh so much less Okay. The many of you oh so much less Okay. The many of you oh so much less Okay. The ones that do like what do you do like ones that do like what do you do like ones that do like what do you do like you connect an MCP server? Okay. Yes.

you connect an MCP server? Okay. Yes. you connect an MCP server? Okay. Yes. And they have another one. Good. Maybe And they have another one. Good. Maybe And they have another one. Good. Maybe you connect like your personal token to you connect like your personal token to you connect like your personal token to like endpoint. like endpoint. like endpoint. Okay. So what happened when we do this? Okay. So what happened when we do this? Okay. So what happened when we do this? We're actually doing like the agent is We're actually doing like the agent is We're actually doing like the agent is acting on behalf of us but pretending to acting on behalf of us but pretending to acting on behalf of us but pretending to be us. be us. be us. So do you think that's a good idea? So do you think that's a good idea? So do you think that's a good idea? Yes or no? Who thinks it's a good idea? >> Exactly. And why we didn't thought about >> Exactly. And why we didn't thought about this like before. this like before. this like before. Okay. So it doesn't matter. Here we are. Okay. So it doesn't matter. Here we are. Okay. So it doesn't matter. Here we are. We are thinking about it. I always We are thinking about it. I always We are thinking about it. I always remember uh the time like when internet remember uh the time like when internet remember uh the time like when internet came like I'm almost 40 so I remember came like I'm almost 40 so I remember came like I'm almost 40 so I remember and everybody was so happy about it. But and everybody was so happy about it. But and everybody was so happy about it. But then started to question like okay then started to question like okay then started to question like okay everything the whole data is public it's everything the whole data is public it's everything the whole data is public it's like we are in the same moment today like we are in the same moment today like we are in the same moment today right like we are really excited about right like we are really excited about right like we are really excited about AI and then after we start to think AI and then after we start to think AI and then after we start to think about security but it's good so why I about security but it's good so why I about security but it's good so why I put there hire your agent put there hire your agent put there hire your agent the analogy I want you to think about the analogy I want you to think about the analogy I want you to think about let's say you have a company or a part let's say you have a company or a part let's say you have a company or a part of a company and you hire someone do you of a company and you hire someone do you of a company and you hire someone do you give them you need them to have access give them you need them to have access give them you need them to have access two things of the company, right? So, two things of the company, right? So, two things of the company, right? So, what you do with these people when you what you do with these people when you what you do with these people when you showing or when you show, what did they showing or when you show, what did they showing or when you show, what did they give to you? You have a your own email,

give to you? You have a your own email, give to you? You have a your own email, right? Your own access, your own right? Your own access, your own right? Your own access, your own credentials. credentials. credentials. So, if you think about it in Asian So, if you think about it in Asian So, if you think about it in Asian world, what are we doing without agents? world, what are we doing without agents? world, what are we doing without agents? We are it's like we are doing like the We are it's like we are doing like the We are it's like we are doing like the CEO credentials, right? You never say CEO credentials, right? You never say CEO credentials, right? You never say like, okay, this is the credentials of like, okay, this is the credentials of like, okay, this is the credentials of CEO, go and read the email. No, because CEO, go and read the email. No, because CEO, go and read the email. No, because everything anything could happen. This everything anything could happen. This everything anything could happen. This is the same. The idea will be hire your is the same. The idea will be hire your is the same. The idea will be hire your agent in a sense of give them your agent in a sense of give them your agent in a sense of give them your agents authority instead of your agents authority instead of your agents authority instead of your credentials. Do you think it's a good credentials. Do you think it's a good credentials. Do you think it's a good idea? How? Yes or no? [laughter] idea? How? Yes or no? [laughter] idea? How? Yes or no? [laughter] Okay. My idea is like I know sometimes Okay. My idea is like I know sometimes Okay. My idea is like I know sometimes um we could be shy but I want I think it um we could be shy but I want I think it um we could be shy but I want I think it would be nice like we can interact a bit would be nice like we can interact a bit would be nice like we can interact a bit because it's a moment that thanks to a because it's a moment that thanks to a because it's a moment that thanks to a engineer and all of us being here all of engineer and all of us being here all of engineer and all of us being here all of your time we can get together and think your time we can get together and think your time we can get together and think about something. I think it's not about something. I think it's not about something. I think it's not common, right? So, make 100% off of it. common, right? So, make 100% off of it. common, right? So, make 100% off of it. Um, okay, great. So, did you all got the Um, okay, great. So, did you all got the Um, okay, great. So, did you all got the page there, the QR codes? Yeah. Great.

page there, the QR codes? Yeah. Great. page there, the QR codes? Yeah. Great. So, remember like my idea of saying, So, remember like my idea of saying, So, remember like my idea of saying, "Okay, "Okay, "Okay, agent read my emails, right?" agent read my emails, right?" agent read my emails, right?" Have you ever thought like how the agent Have you ever thought like how the agent Have you ever thought like how the agent gets to there? How it gets to your gets to there? How it gets to your gets to there? How it gets to your email? email? email? First of all, how do Asians know what First of all, how do Asians know what First of all, how do Asians know what they can do? >> Okay, great. So, you you do it by hand, >> Okay, great. So, you you do it by hand, right? It's not that something right? It's not that something right? It's not that something automatic. >> Yes. >> Yes. >> Exactly. >> Exactly. >> Exactly. >> But >> But >> But >> Exactly. But some huh >> Exactly. But some huh >> Exactly. But some huh >> exactly context window also too. But you >> exactly context window also too. But you >> exactly context window also too. But you always somehow connected something to always somehow connected something to always somehow connected something to the Asian that okay this is what you can the Asian that okay this is what you can the Asian that okay this is what you can do right. do right. do right. So what if we have like an ideal world So what if we have like an ideal world So what if we have like an ideal world or that can go to maybe a directory and or that can go to maybe a directory and or that can go to maybe a directory and say oh this is the whole thing I can do say oh this is the whole thing I can do say oh this is the whole thing I can do and this is all the things I can and this is all the things I can and this is all the things I can execute. That would be a smartest idea execute. That would be a smartest idea execute. That would be a smartest idea right? Have you ever used a phone book?

right? Have you ever used a phone book? right? Have you ever used a phone book? Yeah right. this is safe like who I can Yeah right. this is safe like who I can Yeah right. this is safe like who I can call so I go and look in the phone book call so I go and look in the phone book call so I go and look in the phone book and then I have how to call it I have and then I have how to call it I have and then I have how to call it I have the number they will be the same what the number they will be the same what the number they will be the same what what I want to do and how do I call it what I want to do and how do I call it what I want to do and how do I call it so that's is our first problem discovery so that's is our first problem discovery so that's is our first problem discovery how agents discover what they can do and how agents discover what they can do and how agents discover what they can do and the idea will be it will be an automatic the idea will be it will be an automatic the idea will be it will be an automatic way not just us all the time telling how way not just us all the time telling how way not just us all the time telling how and connecting and stuff right and connecting and stuff right and connecting and stuff right then also there's another part then also there's another part then also there's another part it would be nice to tell the agents or it would be nice to tell the agents or it would be nice to tell the agents or like grant Asians what they can do and like grant Asians what they can do and like grant Asians what they can do and we're not but really specific we're not but really specific we're not but really specific the ones that connected the Gmail the ones that connected the Gmail the ones that connected the Gmail accounts maybe they all gave them read accounts maybe they all gave them read accounts maybe they all gave them read access right just read so we can I don't access right just read so we can I don't access right just read so we can I don't know don't send or like not remove know don't send or like not remove know don't send or like not remove anything so it's more safe okay but what anything so it's more safe okay but what anything so it's more safe okay but what if you have so many important uh if you have so many important uh if you have so many important uh information there that then if the agent information there that then if the agent information there that then if the agent something gets um wrong and somebody something gets um wrong and somebody something gets um wrong and somebody else can read your data it's good else can read your data it's good else can read your data it's good either. It's not safe in any way.

either. It's not safe in any way. either. It's not safe in any way. So what if we can get all these what the So what if we can get all these what the So what if we can get all these what the agent can do all these tools as he agent can do all these tools as he agent can do all these tools as he mentioned and you can grant access to mentioned and you can grant access to mentioned and you can grant access to every tool like this yes this no this every tool like this yes this no this every tool like this yes this no this reading is okay that would be a better reading is okay that would be a better reading is okay that would be a better idea right so we think about idea right so we think about idea right so we think about authorization authorization authorization to that agent not like to act behalf of to that agent not like to act behalf of to that agent not like to act behalf of me and have everything I can do then the me and have everything I can do then the me and have everything I can do then the agent can do it's like going back to the agent can do it's like going back to the agent can do it's like going back to the higher example higher example higher example that a person like I just hired has all that a person like I just hired has all that a person like I just hired has all the same access that the CEO or maybe the same access that the CEO or maybe the same access that the CEO or maybe you hire have an assistant uh or a you hire have an assistant uh or a you hire have an assistant uh or a friend that do something for you like in friend that do something for you like in friend that do something for you like in your real life you will never give your your real life you will never give your your real life you will never give your access to all your things right and if access to all your things right and if access to all your things right and if you do you change them after so this is you do you change them after so this is you do you change them after so this is the same thing the same thing the same thing and also okay we have an ideal world and also okay we have an ideal world and also okay we have an ideal world when agents can discover what they can when agents can discover what they can when agents can discover what they can do then we can tell them what they can do then we can tell them what they can do then we can tell them what they can do or not but how do we trace them down.

How do we trace today what the apps do How do we trace today what the apps do on our behalf when you authorize them? >> Huh? >> Huh? >> Exactly. Audi logs. So perfect >> Exactly. Audi logs. So perfect >> Exactly. Audi logs. So perfect audification, right? Which agent did what on behalf of right? Which agent did what on behalf of which user. In order to do that, that which user. In order to do that, that which user. In order to do that, that comes to our main thing. Give the comes to our main thing. Give the comes to our main thing. Give the agent's identity. agent's identity. agent's identity. If we have if every agent has identity, If we have if every agent has identity, If we have if every agent has identity, we can trace them down. We can know what we can trace them down. We can know what we can trace them down. We can know what agent did what when in behalf of which agent did what when in behalf of which agent did what when in behalf of which user. It seems like it's so much so much user. It seems like it's so much so much user. It seems like it's so much so much better, right? And also what else you better, right? And also what else you better, right? And also what else you can do when you can trace someone can do when you can trace someone can do when you can trace someone regarding to the whole hiring thing, you regarding to the whole hiring thing, you regarding to the whole hiring thing, you can fire them if they do something can fire them if they do something can fire them if they do something wrong. You can revoke access in the same wrong. You can revoke access in the same wrong. You can revoke access in the same way the agent will be revoked if you way the agent will be revoked if you way the agent will be revoked if you know who they are. If something were know who they are. If something were know who they are. If something were wrong with today's things, you have to wrong with today's things, you have to wrong with today's things, you have to disconnect the whole thing, right? Yes disconnect the whole thing, right? Yes disconnect the whole thing, right? Yes or no?

or no? or no? So imagine have Oh, this same So imagine have Oh, this same So imagine have Oh, this same up. Sorry for the word. You can't up. Sorry for the word. You can't up. Sorry for the word. You can't remove it. That's it. So we have remove it. That's it. So we have remove it. That's it. So we have tracibility. We have the whole thing. Okay. So as it come out as a sum up we Okay. So as it come out as a sum up we have the discovery issue where the agent have the discovery issue where the agent have the discovery issue where the agent can go find the service and read the can go find the service and read the can go find the service and read the capabilities capabilities capabilities authorization what this agent can do can authorization what this agent can do can authorization what this agent can do can do scope down and who is this agent do scope down and who is this agent do scope down and who is this agent are you on board with this do you think are you on board with this do you think are you on board with this do you think it's a good idea it's a good idea it's a good idea you have any questions like champion you have any questions like champion you have any questions like champion okay great [snorts] okay great [snorts] okay great [snorts] have you ever heard of a capabilities have you ever heard of a capabilities have you ever heard of a capabilities raise your hand raise your hand raise your hand Yes. Okay. Do you all know what a Yes. Okay. Do you all know what a Yes. Okay. Do you all know what a capability is? capability is? capability is? Who doesn't know? Who doesn't know? Who doesn't know? Okay. Almost the whole room. Okay. So Okay. Almost the whole room. Okay. So Okay. Almost the whole room. Okay. So the idea of using capabilities is the idea of using capabilities is the idea of using capabilities is instead of using scopes, you know, like instead of using scopes, you know, like instead of using scopes, you know, like scope is like a big thing. For example, scope is like a big thing. For example, scope is like a big thing. For example, we have the read scope. So it what what we have the read scope. So it what what we have the read scope. So it what what does mean it's like nothing so specific.

does mean it's like nothing so specific. does mean it's like nothing so specific. The other capability is what can do, but The other capability is what can do, but The other capability is what can do, but it's more cap down. So I can actually it's more cap down. So I can actually it's more cap down. So I can actually determine what an action agent can do. determine what an action agent can do. determine what an action agent can do. So So So the idea is going back to the example I the idea is going back to the example I the idea is going back to the example I put in the beginning. Let's say you talk put in the beginning. Let's say you talk put in the beginning. Let's say you talk to the AI in the chat and you say, to the AI in the chat and you say, to the AI in the chat and you say, "Okay, give me my emails from the last "Okay, give me my emails from the last "Okay, give me my emails from the last week." week." week." So the agent has an intent to do So the agent has an intent to do So the agent has an intent to do something, right? something, right? something, right? It has to be a way that that intent has It has to be a way that that intent has It has to be a way that that intent has to be mapped to a tool or maybe several to be mapped to a tool or maybe several to be mapped to a tool or maybe several tools. tools. tools. So that's kind of the idea. The tools So that's kind of the idea. The tools So that's kind of the idea. The tools will be like capabilities and an intent will be like capabilities and an intent will be like capabilities and an intent will be matched to that. So that's what will be matched to that. So that's what will be matched to that. So that's what we're solving with discoverability. we're solving with discoverability. we're solving with discoverability. If you ever read the the protocol that If you ever read the the protocol that If you ever read the the protocol that we are proposing or maybe read it later, we are proposing or maybe read it later, we are proposing or maybe read it later, you will see um our idea of a well-known you will see um our idea of a well-known you will see um our idea of a well-known Asian configuration endpoint. If you Asian configuration endpoint. If you Asian configuration endpoint. If you know about a little bit about identity, know about a little bit about identity, know about a little bit about identity, you remember OIDC, right?

you remember OIDC, right? you remember OIDC, right? connect these are the same well known connect these are the same well known connect these are the same well known and the idea is like to a nation have and the idea is like to a nation have and the idea is like to a nation have like a public place to know how they can like a public place to know how they can like a public place to know how they can interact with a service like everything interact with a service like everything interact with a service like everything the kind of encryption uh etc. the kind of encryption uh etc. the kind of encryption uh etc. So it will be something like this and So it will be something like this and So it will be something like this and also a place to list capabilities and also a place to list capabilities and also a place to list capabilities and stuff. stuff. stuff. But what happened for example in a world But what happened for example in a world But what happened for example in a world like today that we still I hope I hope like today that we still I hope I hope like today that we still I hope I hope in the future we adopt this but in the in the future we adopt this but in the in the future we adopt this but in the meantime all the services they're still meantime all the services they're still meantime all the services they're still working just with O. So working just with O. So working just with O. So how do we do it in the meantime? how do we do it in the meantime? how do we do it in the meantime? What do we need to agents to be able to What do we need to agents to be able to What do we need to agents to be able to know which what they can use from each know which what they can use from each know which what they can use from each service? Let's say Gmail. We can build something like a directory. We can build something like a directory. So the idea is um to have something So the idea is um to have something So the idea is um to have something I'm going to see it here. So let's say I'm going to see it here. So let's say I'm going to see it here. So let's say most of the most of the most of the you're familiar for open API open API you're familiar for open API open API you're familiar for open API open API spec. Yes.

spec. Yes. spec. Yes. Okay. So most of the common services we Okay. So most of the common services we Okay. So most of the common services we use they all implement open API. So we use they all implement open API. So we use they all implement open API. So we have like a kind of a place to we as a have like a kind of a place to we as a have like a kind of a place to we as a developers or engineers we can say okay developers or engineers we can say okay developers or engineers we can say okay what this service can do. So the idea is what this service can do. So the idea is what this service can do. So the idea is to use that and convert the two to use that and convert the two to use that and convert the two capabilities. So at the beginning until capabilities. So at the beginning until capabilities. So at the beginning until we every service is speak. So let's say we every service is speak. So let's say we every service is speak. So let's say for example do you guys use I don't know for example do you guys use I don't know for example do you guys use I don't know tell me a service you use ah ah >> open AI okay Gmail we have it there but let's okay Gmail we have it there but let's say for example let's see if it works say for example let's see if it works say for example let's see if it works open AI open APIJSON open AI open APIJSON open AI open APIJSON and sometimes they have public they have and sometimes they have public they have and sometimes they have public they have the publics but we need like a JSON the publics but we need like a JSON the publics but we need like a JSON Uh, I don't see it. Uh, I don't see it. Uh, I don't see it. API opening. Okay, I do know. I think API opening. Okay, I do know. I think API opening. Okay, I do know. I think it's this one.

it's this one. it's this one. No. Well, you know what? That were No. Well, you know what? That were No. Well, you know what? That were wrong. wrong. wrong. >> Notion. Not has a really good one. I >> Notion. Not has a really good one. I >> Notion. Not has a really good one. I wanted to use another one from you guys, wanted to use another one from you guys, wanted to use another one from you guys, but the notion is more reachable. but the notion is more reachable. but the notion is more reachable. So here you see so if you have for So here you see so if you have for So here you see so if you have for example not every service has but the example not every service has but the example not every service has but the open API JSON what we doing with the open API JSON what we doing with the open API JSON what we doing with the protocol is translating this oh I already register it. So, I'm going oh I already register it. So, I'm going to show you guys. to show you guys. to show you guys. Yeah. Where is this one? Yeah. Where is this one? Yeah. Where is this one? Sorry. Okay. It will form something like this. Okay. It will form something like this. This is like an example, but it's like This is like an example, but it's like This is like an example, but it's like the same. So, you will get all the the same. So, you will get all the the same. So, you will get all the capabilities from the endpoints. You see capabilities from the endpoints. You see capabilities from the endpoints. You see sometimes you see like a delete again. sometimes you see like a delete again. sometimes you see like a delete again. So it would kind of be idea to approach So it would kind of be idea to approach So it would kind of be idea to approach like a middleware to this point. Yes.

like a middleware to this point. Yes. like a middleware to this point. Yes. Oh, sorry guys. Thank you for telling Oh, sorry guys. Thank you for telling Oh, sorry guys. Thank you for telling me. And me. And me. And okay, here is better. Oh, thank you. okay, here is better. Oh, thank you. okay, here is better. Oh, thank you. Sorry guys. Okay. So the idea is to see Sorry guys. Okay. So the idea is to see Sorry guys. Okay. So the idea is to see here it's like you can translate here it's like you can translate here it's like you can translate the endpoints to capabilities. So the endpoints to capabilities. So the endpoints to capabilities. So because we are still this is just because we are still this is just because we are still this is just because we still we don't have so much because we still we don't have so much because we still we don't have so much services or let's say none like services or let's say none like services or let's say none like implementation stuff but the idea is implementation stuff but the idea is implementation stuff but the idea is like in the meantime we have something like in the meantime we have something like in the meantime we have something that translate this. So what this mean? that translate this. So what this mean? that translate this. So what this mean? It means like let me check. It means like you will have something It means like you will have something for example do you have there in the for example do you have there in the for example do you have there in the agent of protocol you see do you have a agent of protocol you see do you have a agent of protocol you see do you have a directory directory directory this directory we have for example the this directory we have for example the this directory we have for example the Gmail one that we did the same. Gmail one that we did the same. Gmail one that we did the same. So you see you have for example 20 list So you see you have for example 20 list So you see you have for example 20 list of capabilities.

of capabilities. of capabilities. So the idea is like you grab what the So the idea is like you grab what the So the idea is like you grab what the service can do, what is exposing maybe service can do, what is exposing maybe service can do, what is exposing maybe through open or maybe you do it yourself through open or maybe you do it yourself through open or maybe you do it yourself because uh for example maybe you want to because uh for example maybe you want to because uh for example maybe you want to automate a workflow. So the idea is like automate a workflow. So the idea is like automate a workflow. So the idea is like everything get list here. So the everything get list here. So the everything get list here. So the directory will be like a phone directory directory will be like a phone directory directory will be like a phone directory for the agent. Are you following me? for the agent. Are you following me? for the agent. Are you following me? >> Yeah. The what? Sorry. The what? Sorry. >> Yes. I mean it's a good point. Did you >> Yes. I mean it's a good point. Did you >> Yes. I mean it's a good point. Did you hear? Did you hear him? Like fine grain hear? Did you hear him? Like fine grain hear? Did you hear him? Like fine grain out. Okay. So the idea is yes in a sense out. Okay. So the idea is yes in a sense out. Okay. So the idea is yes in a sense of having the most scope thing as of having the most scope thing as of having the most scope thing as possible but still fine out is still possible but still fine out is still possible but still fine out is still goes like goes like goes like minting a token to the user. We want to minting a token to the user. We want to minting a token to the user. We want to meet a token for the agent. So what we meet a token for the agent. So what we meet a token for the agent. So what we are switching is the principle. We now are switching is the principle. We now are switching is the principle. We now want that the agents are a principal want that the agents are a principal want that the agents are a principal actor. actor. actor. But it's a really good thing. That's why But it's a really good thing. That's why But it's a really good thing. That's why we inspire on that. I think it's one of we inspire on that. I think it's one of we inspire on that. I think it's one of the best things we can do. the best things we can do. the best things we can do. Okay, great. Um Okay, great. Um Okay, great. Um so going back to the capabilities so going back to the capabilities so going back to the capabilities the idea is what I just said like having the idea is what I just said like having the idea is what I just said like having this scope once you have like the this scope once you have like the this scope once you have like the readings or like maybe uh just the gets readings or like maybe uh just the gets readings or like maybe uh just the gets or the deletes or the post like or the deletes or the post like or the deletes or the post like everything is quite discerned so you can everything is quite discerned so you can everything is quite discerned so you can decide whe you have any questions.

you have any questions. >> Yes. Yeah. Yeah. That's that really sucks. Uh Yeah. Yeah. That's that really sucks. Uh the idea is you can do it manually. You the idea is you can do it manually. You the idea is you can do it manually. You can actually declare everything so in can actually declare everything so in can actually declare everything so in the directory or in the future the agent the directory or in the future the agent the directory or in the future the agent know how to do. It's like less common. know how to do. It's like less common. know how to do. It's like less common. But yeah, it could happen. But yeah, it could happen. But yeah, it could happen. But the idea is like in in the meantime But the idea is like in in the meantime But the idea is like in in the meantime we do this until services implement we do this until services implement we do this until services implement these sessions out. But yeah, it's a these sessions out. But yeah, it's a these sessions out. But yeah, it's a good question. good question. good question. [snorts] [snorts] [snorts] Um okay so remember like our problems Um okay so remember like our problems Um okay so remember like our problems right so now we we are trying to get a right so now we we are trying to get a right so now we we are trying to get a solution for how like the agents the solution for how like the agents the solution for how like the agents the agents know what they do with the agents know what they do with the agents know what they do with the directory directory directory then we have a way to authorize them then we have a way to authorize them then we have a way to authorize them through the capabilities and now if you through the capabilities and now if you through the capabilities and now if you remember we said it was a good idea to remember we said it was a good idea to remember we said it was a good idea to get them identity right get them identity right get them identity right so what we come so what we come so what we come is giving agents like a private key like is giving agents like a private key like is giving agents like a private key like famous private key. So each agent will famous private key. So each agent will famous private key. So each agent will have its own and that will be attached have its own and that will be attached have its own and that will be attached to the identity.

to the identity. to the identity. Um so in that sense because every agent Um so in that sense because every agent Um so in that sense because every agent has its own identity. Now if you I see has its own identity. Now if you I see has its own identity. Now if you I see you want me to put this on light mode you want me to put this on light mode you want me to put this on light mode too. too. too. Uh what did you say that before? Uh what did you say that before? Uh what did you say that before? Okay, let's go back to this Okay, let's go back to this Okay, let's go back to this there. That's better. Great. there. That's better. Great. there. That's better. Great. zoom in. Okay, zoom in. Okay, zoom in. Okay, there. there. there. So now that the agent will have like a So now that the agent will have like a So now that the agent will have like a access to its own private key, they can access to its own private key, they can access to its own private key, they can sign tokens, they can have like their sign tokens, they can have like their sign tokens, they can have like their own metered tokens and everything is own metered tokens and everything is own metered tokens and everything is encrypted with the private key. encrypted with the private key. encrypted with the private key. So what this means like for now on So what this means like for now on So what this means like for now on instead of like a service let's say instead of like a service let's say instead of like a service let's say Gmail seeing like a user interacted with Gmail seeing like a user interacted with Gmail seeing like a user interacted with the service we can have a log that we the service we can have a log that we the service we can have a log that we actually say okay this agent is doing actually say okay this agent is doing actually say okay this agent is doing something on my behalf that is connected something on my behalf that is connected something on my behalf that is connected to the user but it's actually for to the user but it's actually for to the user but it's actually for example agent from cursor or an agent example agent from cursor or an agent example agent from cursor or an agent from cloud or an agent from whatever. So from cloud or an agent from whatever. So from cloud or an agent from whatever. So we are changing the paradigm. We stop we are changing the paradigm. We stop we are changing the paradigm. We stop seeing as an agent is like hiding behind seeing as an agent is like hiding behind seeing as an agent is like hiding behind the user and now the agent is there as a the user and now the agent is there as a the user and now the agent is there as a principal acting. So is is for me was principal acting. So is is for me was principal acting. So is is for me was really exciting.

really exciting. really exciting. So So So do you have any concerns about this do you have any concerns about this do you have any concerns about this private key private key public policy private key private key public policy private key private key public policy key things? Yeah. Exactly. Exactly. That's beautiful, right? You can say, That's beautiful, right? You can say, That's beautiful, right? You can say, "Oh, this is not doing what I supposed "Oh, this is not doing what I supposed "Oh, this is not doing what I supposed to be doing, and I go and I revoke it." to be doing, and I go and I revoke it." to be doing, and I go and I revoke it." So, it's cool. And maybe you can think So, it's cool. And maybe you can think So, it's cool. And maybe you can think of like, okay, the the I revoke it, but of like, okay, the the I revoke it, but of like, okay, the the I revoke it, but the access token is still there. So, the access token is still there. So, the access token is still there. So, what you can do is like deleting with what you can do is like deleting with what you can do is like deleting with the GDI. So, bye. the GDI. So, bye. the GDI. So, bye. >> Yes. Mhm. Always the token always the agents Mhm. Always the token always the agents they always have a user they are they always have a user they are they always have a user they are reporting to you. They are never reporting to you. They are never reporting to you. They are never detached. So always the the agent is detached. So always the the agent is detached. So always the the agent is like with a user. >> Yes.

>> Yes. >> Yes. Exactly. you have like all the >> Yes. Exactly. you have like all the >> Yes. Exactly. you have like all the information the agent also the host we information the agent also the host we information the agent also the host we are in introducing a new thing that is are in introducing a new thing that is are in introducing a new thing that is called host that is like the place when called host that is like the place when called host that is like the place when you are like creating this agent from so you are like creating this agent from so you are like creating this agent from so you actually can also delete the host you actually can also delete the host you actually can also delete the host you can say okay this host is not you can say okay this host is not you can say okay this host is not authorized so you can see the host you authorized so you can see the host you authorized so you can see the host you can see the agent ID you can see the can see the agent ID you can see the can see the agent ID you can see the user you can see everything user you can see everything user you can see everything okay great okay great okay great more questions more questions more questions okay don't be shy like we are here for okay don't be shy like we are here for okay don't be shy like we are here for this this this Yes. >> Yeah, that's a great question. Um, >> Yeah, that's a great question. Um, actually it's more like an enterprise actually it's more like an enterprise actually it's more like an enterprise focus, right? So because we did this in focus, right? So because we did this in focus, right? So because we did this in February, February, February, the things changed so much until now.

the things changed so much until now. the things changed so much until now. Like for example, Asians are not so Like for example, Asians are not so Like for example, Asians are not so ephemeral. Maybe you have a forever long ephemeral. Maybe you have a forever long ephemeral. Maybe you have a forever long Asians, right? Or maybe you have two Asians, right? Or maybe you have two Asians, right? Or maybe you have two Asians or maybe you have Asian design of Asians or maybe you have Asian design of Asians or maybe you have Asian design of a company and they have policies. a company and they have policies. a company and they have policies. So we are working on that in a new draft So we are working on that in a new draft So we are working on that in a new draft and we are addressing that too. Um and we are addressing that too. Um and we are addressing that too. Um because it's something quite um because it's something quite um because it's something quite um important to address. So yes, I was important to address. So yes, I was important to address. So yes, I was about to say that in the end, but yeah, about to say that in the end, but yeah, about to say that in the end, but yeah, we're about to release a new draft with we're about to release a new draft with we're about to release a new draft with uh if you have this is an open source. uh if you have this is an open source. uh if you have this is an open source. It's a project that we want to all of us It's a project that we want to all of us It's a project that we want to all of us own. So if you have some ideas like you own. So if you have some ideas like you own. So if you have some ideas like you reach out like like that one for reach out like like that one for reach out like like that one for example, it's really good. So we can example, it's really good. So we can example, it's really good. So we can improve it's good for ourselves and good improve it's good for ourselves and good improve it's good for ourselves and good for everyone. And I don't want this to for everyone. And I don't want this to for everyone. And I don't want this to be just like for enterprise just to all be just like for enterprise just to all be just like for enterprise just to all of us that use AI that be safe. So thank of us that use AI that be safe. So thank of us that use AI that be safe. So thank you. you. you. Okay. So that was that was just Okay. So that was that was just Okay. So that was that was just discussing about the V1 to V2. discussing about the V1 to V2. discussing about the V1 to V2. Um great. So Um great. So Um great. So three layers then one protocol. Why we three layers then one protocol. Why we three layers then one protocol. Why we say this? Because if you go and in the say this? Because if you go and in the say this? Because if you go and in the searching the website you will see we searching the website you will see we searching the website you will see we publish like a first version just like a publish like a first version just like a publish like a first version just like a draft or a ancient plugin inside of a draft or a ancient plugin inside of a draft or a ancient plugin inside of a draft. The idea is you can use this and draft. The idea is you can use this and draft. The idea is you can use this and play around and see what you come up play around and see what you come up play around and see what you come up with. So in the agent plug-in with. So in the agent plug-in with. So in the agent plug-in you can uh use it like on the server you can uh use it like on the server you can uh use it like on the server side so a server can verify an agent or side so a server can verify an agent or side so a server can verify an agent or issue grants or force whatever issue grants or force whatever issue grants or force whatever constraint that you have been doing with constraint that you have been doing with constraint that you have been doing with that also on the SDK side uh we ship it

that also on the SDK side uh we ship it that also on the SDK side uh we ship it with an MCP so you can connect it to with an MCP so you can connect it to with an MCP so you can connect it to your cloud to try it out you connect it your cloud to try it out you connect it your cloud to try it out you connect it to your whatever you're using course or to your whatever you're using course or to your whatever you're using course or whatever you're using with MCPS and also whatever you're using with MCPS and also whatever you're using with MCPS and also the other layer is the directory it's the other layer is the directory it's the other layer is the directory it's just a place like a phone book like just a place like a phone book like just a place like a phone book like where the intent match what the action. where the intent match what the action. where the intent match what the action. So intent will be matching the So intent will be matching the So intent will be matching the capabilities. capabilities. capabilities. Um so the idea is that we can see it in Um so the idea is that we can see it in Um so the idea is that we can see it in action. action. action. So what we will do if you want So what we will do if you want So what we will do if you want you can go to what I shared in the QR you can go to what I shared in the QR you can go to what I shared in the QR code. Let's go to the page. code. Let's go to the page. code. Let's go to the page. Okay, Okay, Okay, you will see a directory there. Did you you will see a directory there. Did you you will see a directory there. Did you all find the directory button? You will all find the directory button? You will all find the directory button? You will you will come into this and you will see you will come into this and you will see you will come into this and you will see a connect button. a connect button. a connect button. So you have to login first for sure. And So you have to login first for sure. And So you have to login first for sure. And you will see a connect and then you will you will see a connect and then you will you will see a connect and then you will see the MCP. see the MCP. see the MCP. So you can connect that for example to So you can connect that for example to So you can connect that for example to the cloud. I have it here. I wanted to the cloud. I have it here. I wanted to the cloud. I have it here. I wanted to to show you guys a bit what we were to show you guys a bit what we were to show you guys a bit what we were talking about.

talking about. talking about. So So So let's say we say I'm going to ask for let's say we say I'm going to ask for let's say we say I'm going to ask for emails. Okay, I just did a bunch of demo emails. Okay, I just did a bunch of demo emails. Okay, I just did a bunch of demo emails, but I'm going to show it to you emails, but I'm going to show it to you emails, but I'm going to show it to you guys so I don't show like personal guys so I don't show like personal guys so I don't show like personal information. But for example, I have my information. But for example, I have my information. But for example, I have my NCP connected. So you will see something NCP connected. So you will see something NCP connected. So you will see something like this like this like this uh connectors customize. Here you see uh connectors customize. Here you see uh connectors customize. Here you see Asia D. Asia D. Asia D. You will see something like this. Then You will see something like this. Then You will see something like this. Then you can approve, disapprove, always deny you can approve, disapprove, always deny you can approve, disapprove, always deny just the Asian D. um MCP and if it's just the Asian D. um MCP and if it's just the Asian D. um MCP and if it's that my idea is like you try it out just that my idea is like you try it out just that my idea is like you try it out just with MTP of Asian D. So the agent with MTP of Asian D. So the agent with MTP of Asian D. So the agent doesn't have access to other tools. So doesn't have access to other tools. So doesn't have access to other tools. So it's like the principal one to see how it's like the principal one to see how it's like the principal one to see how it interact and how it gets the it interact and how it gets the it interact and how it gets the identity. Our whole idea is like when identity. Our whole idea is like when identity. Our whole idea is like when you use this MCP the agent will have an you use this MCP the agent will have an you use this MCP the agent will have an identity we request you for capabilities identity we request you for capabilities identity we request you for capabilities and we'll try to execute it and you we and we'll try to execute it and you we and we'll try to execute it and you we will see the logs and everything um uh will see the logs and everything um uh will see the logs and everything um uh running. Okay. running. Okay. running. Okay. So let's see for example um hey bring me So let's see for example um hey bring me So let's see for example um hey bring me my last email.

my last email. my last email. Oh sorry it's going to use the H&L connectors. it's going to use the H&L connectors. Can you see it's too small? Can you see it's too small? Can you see it's too small? It's okay. It's okay. It's okay. Okay. Okay. you see is using the because it Okay. you see is using the because it has the NCP is using the directory to has the NCP is using the directory to has the NCP is using the directory to see from my intent of like bring me my see from my intent of like bring me my see from my intent of like bring me my last email which capabilities are out last email which capabilities are out last email which capabilities are out there and he's asking for approval. there and he's asking for approval. there and he's asking for approval. We are using here device uh device flow. We are using here device uh device flow. We are using here device uh device flow. Do you know the device flow? Are you Do you know the device flow? Are you Do you know the device flow? Are you familiar? It's just like it's like familiar? It's just like it's like familiar? It's just like it's like connecting a device. So we are acting connecting a device. So we are acting connecting a device. So we are acting like is a if the agent is another like is a if the agent is another like is a if the agent is another device. So you can see uh the agent device. So you can see uh the agent device. So you can see uh the agent called is called email reader is that's called is called email reader is that's called is called email reader is that's for default. You can change later if you for default. You can change later if you for default. You can change later if you want to. It's requesting me to read at want to. It's requesting me to read at want to. It's requesting me to read at least my emails. We're going to approve. And I'm going to show you that guys And I'm going to show you that guys later.

So the idea here um is that the agent So the idea here um is that the agent will connect we get the identity it uh will connect we get the identity it uh will connect we get the identity it uh will have the last email. will have the last email. will have the last email. Okay. Okay. Okay. Okay. We have a nice email. So we know Okay. We have a nice email. So we know Okay. We have a nice email. So we know agents can read emails. That's not the agents can read emails. That's not the agents can read emails. That's not the demo. The demo is what what happens. So demo. The demo is what what happens. So demo. The demo is what what happens. So remember we at the beginning we say if remember we at the beginning we say if remember we at the beginning we say if we gave identity we can have logs. So we gave identity we can have logs. So we gave identity we can have logs. So let's see what the agent did. So I know let's see what the agent did. So I know let's see what the agent did. So I know I have an active agent. There's an email I have an active agent. There's an email I have an active agent. There's an email reader that has this agent ID. He's in a reader that has this agent ID. He's in a reader that has this agent ID. He's in a local device. local device. local device. It has these things and also I can see It has these things and also I can see It has these things and also I can see here this agent with this user ID. here this agent with this user ID. here this agent with this user ID. Okay, I see the agent here just is the Okay, I see the agent here just is the Okay, I see the agent here just is the email reader and he got these results. email reader and he got these results. email reader and he got these results. So So So I'm actually tracking down what the I'm actually tracking down what the I'm actually tracking down what the agent did, right? agent did, right? agent did, right? So now let's say So now let's say So now let's say I want the agent to I don't know send an I want the agent to I don't know send an I want the agent to I don't know send an email by default what we are proposing email by default what we are proposing email by default what we are proposing is like all the hosts like for example is like all the hosts like for example is like all the hosts like for example clo has reading capabilities by default clo has reading capabilities by default clo has reading capabilities by default so then it wouldn't mess up youration so then it wouldn't mess up youration so then it wouldn't mess up youration with your inbox right so let's see uh with your inbox right so let's see uh with your inbox right so let's see uh let's send an email who has like a let's send an email who has like a let's send an email who has like a really short email that I can put in really short email that I can put in really short email that I can put in there there there >> hello >> hello >> hello really really really but no but actual one but no but actual one but no but actual one [laughter] >> who has like a good email. If not I can

>> who has like a good email. If not I can put like my own but if you want to show put like my own but if you want to show put like my own but if you want to show okay so I gonna put mine okay so I gonna put mine okay so I gonna put mine you see I to myself you see I to myself you see I to myself saying I'm gonna use hello world. saying I'm gonna use hello world. saying I'm gonna use hello world. I thought that your email was hello I thought that your email was hello I thought that your email was hello world was so cool. [laughter] world was so cool. [laughter] world was so cool. [laughter] Okay, Okay, Okay, so the idea here is so the idea here is so the idea here is if you as you just saw like the agent if you as you just saw like the agent if you as you just saw like the agent just have like the reading capabilities. just have like the reading capabilities. just have like the reading capabilities. Ideally, it will never could send the Ideally, it will never could send the Ideally, it will never could send the email without me granting it. So for example So for example we can see it here right the only we can see it here right the only we can see it here right the only capabilities it has is two of these two. capabilities it has is two of these two. capabilities it has is two of these two. So it will try to So it will try to So it will try to see it here. We can also we also did see it here. We can also we also did see it here. We can also we also did like this extension for us to actually like this extension for us to actually like this extension for us to actually watch it better what the aation was watch it better what the aation was watch it better what the aation was doing. doing. doing. Okay.

Okay. Okay. Okay. Authorize patch with security Okay. Authorize patch with security Okay. Authorize patch with security verification. Okay. So you see this um the agent now Okay. So you see this um the agent now is using CA like asyn like it's client is using CA like asyn like it's client is using CA like asyn like it's client back channel authorization instead of back channel authorization instead of back channel authorization instead of like just showing me like a redirect and like just showing me like a redirect and like just showing me like a redirect and see a device that I approve I could see a device that I approve I could see a device that I approve I could approve from here. So for the demo I approve from here. So for the demo I approve from here. So for the demo I just going to approve just going to approve just going to approve and now that the agent has approved. and now that the agent has approved. and now that the agent has approved. I approve it. It will be actually It will be actually sending the email. So you will see sending the email. So you will see sending the email. So you will see in the capabilities here that now you in the capabilities here that now you in the capabilities here that now you can send the capabilities of uh send can send the capabilities of uh send can send the capabilities of uh send emails and actually emails and actually emails and actually we can see here he just it just send the we can see here he just it just send the we can see here he just it just send the email right so email right so email right so what do we want to try this we're going what do we want to try this we're going what do we want to try this we're going to see if you see no no okay here is the to see if you see no no okay here is the to see if you see no no okay here is the email okay so email okay so email okay so what we want to try now let's say this what we want to try now let's say this what we want to try now let's say this something went wrong with the agent something went wrong with the agent something went wrong with the agent Somebody was trying to access my Gmail Somebody was trying to access my Gmail Somebody was trying to access my Gmail trying to propector whatever. So the trying to propector whatever. So the trying to propector whatever. So the idea of this whole thing is to have the idea of this whole thing is to have the idea of this whole thing is to have the trustability we just saw is on the logs trustability we just saw is on the logs trustability we just saw is on the logs right and what if we want to revoke it right and what if we want to revoke it right and what if we want to revoke it let's try you let's try to revoke it and let's try you let's try to revoke it and let's try you let's try to revoke it and try to for example read my emails. So try to for example read my emails. So try to for example read my emails. So we're going to revoke it first so it we're going to revoke it first so it we're going to revoke it first so it cannot see a thing.

Oh I lost the page here. [snorts] So in Oh I lost the page here. [snorts] So in agents we can revoke the agent. So agents we can revoke the agent. So agents we can revoke the agent. So bye-bye. And now we can say read that bye-bye. And now we can say read that bye-bye. And now we can say read that last email you just sent. You see the connection got revoked. You see the connection got revoked. So what happened now? Why it can't read So what happened now? Why it can't read So what happened now? Why it can't read it anyway? it anyway? it anyway? Because what we did is like Because what we did is like Because what we did is like he created another agent an identity he created another agent an identity he created another agent an identity because I revoked the one before but because I revoked the one before but because I revoked the one before but this is just happening because the get this is just happening because the get this is just happening because the get the list is a default capability in our the list is a default capability in our the list is a default capability in our host because for us it's safe. What if host because for us it's safe. What if host because for us it's safe. What if now I wanted to say now I wanted to say now I wanted to say um send an email saying hello to myself. um send an email saying hello to myself. um send an email saying hello to myself. It will do the same. It will ask for it.

It will do the same. It will ask for it. It will do the same. It will ask for it. So actually it's working right. I can So actually it's working right. I can So actually it's working right. I can actually revoke it. I can see the logs. actually revoke it. I can see the logs. actually revoke it. I can see the logs. I can say what the agent can do or not. I can say what the agent can do or not. I can say what the agent can do or not. Don't you think it's a it's kind of nice Don't you think it's a it's kind of nice Don't you think it's a it's kind of nice to have this kind of workflow? It's more to have this kind of workflow? It's more to have this kind of workflow? It's more controlled. controlled. controlled. Yeah. You have any questions about this? Yeah. You have any questions about this? Yeah. You have any questions about this? How something that pops in your mind? How something that pops in your mind? How something that pops in your mind? Yeah. Yes. Yes. Yeah. Yes. Yes. Yeah. Every constraint that you want to Every constraint that you want to Every constraint that you want to be careful about, you can put in the be careful about, you can put in the be careful about, you can put in the capabilities. So, it's good. Yeah. Yeah. Yes. Yes. Yes. Yes. Yes. Yes. Yes, exactly. You can say maximum Yes, exactly. You can say maximum Yes, exactly. You can say maximum maximum time of executing. You can say maximum time of executing. You can say maximum time of executing. You can say the time. You can say everything. the time. You can say everything. the time. You can say everything. >> Yeah, it is. Thanks there.

Well, you can have both. Well, you can have both. >> Our idea is like to be safe but not to >> Our idea is like to be safe but not to >> Our idea is like to be safe but not to be annoying. Imagine every time you had be annoying. Imagine every time you had be annoying. Imagine every time you had to read something. Oh, I had to approve to read something. Oh, I had to approve to read something. Oh, I had to approve every time. You're going to hate us, you every time. You're going to hate us, you every time. You're going to hate us, you know. So the idea is like a host for know. So the idea is like a host for know. So the idea is like a host for example or inclus sorry I spoke in example or inclus sorry I spoke in example or inclus sorry I spoke in Spanish include um or like maybe a host Spanish include um or like maybe a host Spanish include um or like maybe a host like someone specific you want like for like someone specific you want like for like someone specific you want like for example let's say co can do everything example let's say co can do everything example let's say co can do everything and then like are recently joined just and then like are recently joined just and then like are recently joined just have like this specific access so you have like this specific access so you have like this specific access so you can do it like by user policies as I was can do it like by user policies as I was can do it like by user policies as I was talking about or you can do it like host talking about or you can do it like host talking about or you can do it like host policies. So you have to be like in the policies. So you have to be like in the policies. So you have to be like in the middle I think of like good UX uh the middle I think of like good UX uh the middle I think of like good UX uh the good user experience but also secure good user experience but also secure good user experience but also secure enough enough enough >> but ultimately >> yeah is the ser yeah yeah yeah because >> yeah is the ser yeah yeah yeah because uh agent what we're doing like as I said uh agent what we're doing like as I said uh agent what we're doing like as I said you can try it out uh with the server you can try it out uh with the server you can try it out uh with the server part is the one going to verify the part is the one going to verify the part is the one going to verify the agent like back with the users going to agent like back with the users going to agent like back with the users going to verify the policies we're going to verify the policies we're going to verify the policies we're going to verify has access or not so yeah all the verify has access or not so yeah all the verify has access or not so yeah all the time verifying so Great. Um, so the whole idea was to show Great. Um, so the whole idea was to show you this. Uh, I was trying to ask the to you this. Uh, I was trying to ask the to you this. Uh, I was trying to ask the to send. Um, I need to confirm. So you see, send. Um, I need to confirm. So you see, send. Um, I need to confirm. So you see, so I here I have the request. I didn't so I here I have the request. I didn't so I here I have the request. I didn't accept it. So let's say I deny it. It accept it. So let's say I deny it. It accept it. So let's say I deny it. It will be like the same. I just did.

will be like the same. I just did. will be like the same. I just did. So ideally he wouldn't. You see that's red. Okay. So it's You see that's red. Okay. So it's working good. So he wants me to allow it working good. So he wants me to allow it working good. So he wants me to allow it and I'm going to I'm going to So can you and I'm going to I'm going to So can you and I'm going to I'm going to So can you tell me agent status? So tell me agent status? So tell me agent status? So you can have all the time like track you can have all the time like track you can have all the time like track down what agent is doing if it's revoked down what agent is doing if it's revoked down what agent is doing if it's revoked or not. or not. or not. Yeah. >> Oh, are you saying if you have for >> Oh, are you saying if you have for example a skill that is saying to use example a skill that is saying to use example a skill that is saying to use the MCP server differently >> directly? >> directly? >> Yeah. Well, actually what we are doing >> Yeah. Well, actually what we are doing >> Yeah. Well, actually what we are doing is we are infor in this just an example is we are infor in this just an example is we are infor in this just an example for you to see how the protocol is doing for you to see how the protocol is doing for you to see how the protocol is doing just like a demo but you can enforce for just like a demo but you can enforce for just like a demo but you can enforce for example that the agent the only thing example that the agent the only thing example that the agent the only thing that can use um is the MCP tools in this that can use um is the MCP tools in this that can use um is the MCP tools in this case that's what we did with the plug-in case that's what we did with the plug-in case that's what we did with the plug-in but yeah you have like for our next but yeah you have like for our next but yeah you have like for our next protocol it's going to be like more protocol it's going to be like more protocol it's going to be like more uh more cap down so the only way the uh more cap down so the only way the uh more cap down so the only way the agent can go out and ask for services is agent can go out and ask for services is agent can go out and ask for services is through the agent out protocol so it's a through the agent out protocol so it's a through the agent out protocol so it's a good really good question.

good really good question. good really good question. Yeah. >> The what? Sorry. >> The what? Sorry. >> The proxy >> Yes. Uh you have this in the directory. >> Yes. Uh you have this in the directory. Now you can use it like when you log Now you can use it like when you log Now you can use it like when you log into for example you are connecting a into for example you are connecting a into for example you are connecting a lot of services in the directory. So the lot of services in the directory. So the lot of services in the directory. So the agent when it connects to the MCP can agent when it connects to the MCP can agent when it connects to the MCP can know all the capabilities that it can know all the capabilities that it can know all the capabilities that it can do. So inside of the MC the proxy you do. So inside of the MC the proxy you do. So inside of the MC the proxy you can see for example the Gmail you can can see for example the Gmail you can can see for example the Gmail you can see all the capabilities that agent can see all the capabilities that agent can see all the capabilities that agent can do. You can see like the agents doing do. You can see like the agents doing do. You can see like the agents doing stuff the logs and everything. So every stuff the logs and everything. So every stuff the logs and everything. So every log is like cut down by provider. log is like cut down by provider. log is like cut down by provider. Okay. Okay. Okay. Okay. Um and about that um our actually Okay. Um and about that um our actually Okay. Um and about that um our actually proxy is just a directory. It's not a proxy is just a directory. It's not a proxy is just a directory. It's not a real proxy for us like proxy is a really real proxy for us like proxy is a really real proxy for us like proxy is a really bad idea. It's not scalable because bad idea. It's not scalable because bad idea. It's not scalable because proxy uses data. So in this case it's proxy uses data. So in this case it's proxy uses data. So in this case it's just like a directory matching intent just like a directory matching intent just like a directory matching intent with capabilities.

with capabilities. with capabilities. Okay. Um so so back again if you want to try it you so back again if you want to try it you can like live you can use like the can like live you can use like the can like live you can use like the plugin the SDK. plugin the SDK. plugin the SDK. It's really nice because we started like It's really nice because we started like It's really nice because we started like from the problems and now actually the from the problems and now actually the from the problems and now actually the solutions right like the discovery solutions right like the discovery solutions right like the discovery authorization and identity. authorization and identity. authorization and identity. Um this is kind of a what I will show Um this is kind of a what I will show Um this is kind of a what I will show you guys like MCP how to connect it. Um you guys like MCP how to connect it. Um you guys like MCP how to connect it. Um the SDK side with the MCP is the one the SDK side with the MCP is the one the SDK side with the MCP is the one that is creating the the the keys and that is creating the the the keys and that is creating the the the keys and assign it to the to the agents and the assign it to the to the agents and the assign it to the to the agents and the server side is like verifying server side is like verifying server side is like verifying authorizing grant um giving the grants authorizing grant um giving the grants authorizing grant um giving the grants that are authorized by the user and and that are authorized by the user and and that are authorized by the user and and so on. so on. so on. So for me the most interesting thing of all for me the most interesting thing of all is we need to stop giving credentials is we need to stop giving credentials is we need to stop giving credentials our credentials to our agents we need to our credentials to our agents we need to our credentials to our agents we need to give them authority this should we stop give them authority this should we stop give them authority this should we stop saying like pretend to be me instead of saying like pretend to be me instead of saying like pretend to be me instead of saying like act for me within these saying like act for me within these saying like act for me within these limits.

So we are almost in the end. So we are almost in the end. If you have any questions, something If you have any questions, something If you have any questions, something that pop into your mind or it could be that pop into your mind or it could be that pop into your mind or it could be also an addition of what I'm saying. I also an addition of what I'm saying. I also an addition of what I'm saying. I don't know if you ever thought of this. don't know if you ever thought of this. don't know if you ever thought of this. Do you think it's a good idea that we Do you think it's a good idea that we Do you think it's a good idea that we implement something like this? I'm not implement something like this? I'm not implement something like this? I'm not saying this one, but maybe. Yeah. saying this one, but maybe. Yeah. saying this one, but maybe. Yeah. Okay. The idea is that this is open for Okay. The idea is that this is open for Okay. The idea is that this is open for everyone. So I would love you guys to everyone. So I would love you guys to everyone. So I would love you guys to join us on Discord or you can send me a join us on Discord or you can send me a join us on Discord or you can send me a message, send me an email, be in the message, send me an email, be in the message, send me an email, be in the channel like be active because if we channel like be active because if we channel like be active because if we improve this for all it's going to be improve this for all it's going to be improve this for all it's going to be good for all of us. Yes. >> Yes. Yes, please. And please do. Yes, >> Yes. Yes, please. And please do. Yes, please do. Sure. >> No, it's totally diagnostic. >> No, it's totally diagnostic. >> Yes, Yeah, that's on our B2 and that's our Yeah, that's on our B2 and that's our prime focus now. So, yeah, that's a prime focus now. So, yeah, that's a prime focus now. So, yeah, that's a great idea.

great idea. great idea. >> Great. Any anyone else? Yes. >> No, it's different. >> No, it's different. >> Yeah. >> Yeah. >> Yeah. >> No, we also I mean we have like as an >> No, we also I mean we have like as an >> No, we also I mean we have like as an inspiration like everything that's out inspiration like everything that's out inspiration like everything that's out there, but it's not the same. It's there, but it's not the same. It's there, but it's not the same. It's different. Yeah. Because they are not different. Yeah. Because they are not different. Yeah. Because they are not still treating ancient as a principle. still treating ancient as a principle. still treating ancient as a principle. We are treating nations as a principle. We are treating nations as a principle. We are treating nations as a principle. They have their own identity. So from They have their own identity. So from They have their own identity. So from that it's different in that way. >> I don't know. We don't I don't have that >> I don't know. We don't I don't have that information. information. information. Yes. >> Oh yeah. >> Oh yeah. You see I it's connected because of the You see I it's connected because of the You see I it's connected because of the discovery but it's still the same like discovery but it's still the same like discovery but it's still the same like for me the most important part is like for me the most important part is like for me the most important part is like the Asian B principles have their own the Asian B principles have their own the Asian B principles have their own identity AI gateway doesn't have doesn't identity AI gateway doesn't have doesn't identity AI gateway doesn't have doesn't do that yet I hope it does but the whole do that yet I hope it does but the whole do that yet I hope it does but the whole idea is to have like traceability have idea is to have like traceability have idea is to have like traceability have the whole life cycle and to be able to the whole life cycle and to be able to the whole life cycle and to be able to track down and hunt if you want an agent track down and hunt if you want an agent track down and hunt if you want an agent so that you only have if you have so that you only have if you have so that you only have if you have identity on on each agent.

identity on on each agent. identity on on each agent. and AI gateway is not providing that. and AI gateway is not providing that. and AI gateway is not providing that. Sure. Is there any more questions? Okay. Well, you can reach me in the Okay. Well, you can reach me in the that's my email if you want to email you that's my email if you want to email you that's my email if you want to email you want to contribute together would be want to contribute together would be want to contribute together would be nice. Uh that's my link in and the nice. Uh that's my link in and the nice. Uh that's my link in and the discord channel from the whole Asian discord channel from the whole Asian discord channel from the whole Asian protocol. Okay. Thank you so much. It's protocol. Okay. Thank you so much. It's protocol. Okay. Thank you so much. It's been a nice one. been a nice one. been a nice one. [applause]