WorkOS demo

Scoped Agent Delegation

Scoped delegation for AI agents using WorkOS AuthKit, Authorization/FGA, and Audit Logs.

A human can have broad access, but an agent only gets narrow, temporary permission. Every tool call is checked by both gates, explained, and recorded.

Open live demo

Finance Agent

Payroll export request

WorkOS FGAHuman can view payrollallowed

Agent permissionFinance Agent lacks payroll.exportdenied

Audit Logsagent.tool_call.deniedrecorded

Agent identity

Scoped agent permissions

Local and WorkOS audit trail