AI Agents Can Do a Lot. But Should They?

Most conversations about AI agents focus on what they can do. Very few focus on what they should be allowed to do. That gap is what I kept thinking about when I built Vouch for the Auth0 "Authorized to Act" hackathon. The Problem: AI agents are getting good at taking actions: booking meetings, calling APIs, sending emails, managing files. But the current delegation models are broken. You either leak credentials in prompts, which is dangerous, or you hand the agent broad OAuth access and hope it