Giving an AI agent the user's token or a shared service-account credential collapses least privilege and attribution. Learn why an agent needs to be a distinct, first-class principal — and how RFC 8693's act claim already models it.
CerberAuth