No client secrets ever touch the AI agent. The agent’s browser proves possession of the auth code with a cryptographic verifier. This is what Claude and most modern AI clients use by default - the OAuth 2.1 standard for public clients, and the safest option for software running on someone else’s machine.
Your security model, applied to every prompt
The agent inherits the role and permissions of whoever signed in. A junior with read-only stays read-only. A regional marketing lead can change their region and nothing else. Tokens are scoped to your tenant, audience-bound, and revocable from the admin at any time. OAuth 2.1 underneath, your existing logins on top.