Aaron Parecki

The "Agent Verified" signup flow from WorkOS is exactly what I've been telling the agent platforms they should be doing with Cross App Access! Very cool to see this launch! 👏

https://workos.com/auth-md/docs/flows/verified

"The agent's provider — OpenAI, Anthropic, Cursor, or any trusted agent platform — attests to the user's identity at registration time. Your service verifies the attestation and issues credentials synchronously, no human interaction required."

In Cross App Access terms:

• The "agent platform/provider" is the ID-JAG issuer, because users are already signed in to those platforms when they use agents
• The "service" is the ID-JAG consumer (the Resource AS), and issues an access token if the ID-JAG is trusted and valid

You can test this out in the Cross App Access sandbox today! https://xaa.dev/

my head feels like a blender that has been filled past the "do not fill above" line