Presented by Magnus Jungsbluth and Jan Brennenstuhl at AGNTCon + MCPCon Europe in Amsterdam on 18 September 2026.
Materials #
- Presentation slides (PDF)
- Session information
- Supporting article: What I Learned Building an Identity Broker With Coding Agents
Reading companion #
An agent should not hold a shared, long-lived provider credential. The broker ties delegated access to both the person and the agent, with chosen permissions and optional expiry. On a tool call, a gateway exchanges the agent’s token for a provider token; the provider token does not enter the agent’s context.
This is a short reading companion, not a transcript. The supporting article explains the identity model and the engineering lessons in accessible HTML.