MachineAuth: Open source Authentication infrastructure for AI agents

Right now, authentication is designed for humans. Passwords, sessions, API keys. But AI agents are starting to take actions on behalf of users, and there’s no clean way to give them scoped, delegated, revocable authority.

If you give an agent your API key, it has full access. That’s unsafe. If you don’t, it can’t act autonomously.

So we built programmable OAuth for agents. Agents get scoped permissions, actions are logged, access can be revoked, and everything is traceable.

I’ve been building systems and self-hosting infrastructure for years, and I became obsessed with this problem once I started working with AI agents directly. Every serious agent system eventually runs into authentication issues.