Learn More
← Back to C1 Academy
Agent Authorization
Jess Starr·Product Manager, AI Access Management
Jess, Product Manager for AI Access Management at C1, walks through the two approaches to authorizing runtime agent access, gateway and authorization standard, and why a good platform provider supports both.
Main Takeaways
- There are two approaches to authorizing runtime agent access to your systems, and a good platform provider supports both.
- Gateway: the provider acts as a proxy between the agent and the application, checking identity and policy on every request and allowing or blocking based on that. The gateway sees and logs the end-to-end flow.
- Authorization standard (like EMA): the agent gets direct access to your application through a short-lived, scoped token. The provider verifies who you are and your access level, then mints the token.
- With the standard approach there are no standing keys, and the provider never sees your application's data, though access logs remain available.