Skip to main content
Delegated authorization allows an authenticated user to grant your AI agent permission to call APIs on their behalf. Auth0 implements delegated authorization using access tokens that define the scope of permissions the user has explicitly granted to the agent. In Auth0, users can authorize AI agents to call first-party or third-party APIs on their behalf.

​
Call first-party APIs on a user’s behalf

Enable your agent to call your application’s own first-party APIs using an access token issued after user authentication. The token is scoped to the user’s permissions and forwarded by the agent in API requests. Learn more.

​
Call third-party APIs on a user’s behalf

Use Token Vault to connect your agent to external APIs like Google, Slack, or GitHub. Token Vault handles obtaining, storing, and refreshing API tokens so your agent never handles third-party credentials directly. Learn more.