Ask HN: What standards or protocols exist for AI Agent permissions

2 ポイント投稿者 lyfeninja3 か月前3 コメント

Curious what standards exist for AI agent permissions. Something like Linux read, write, execute types, but for AI agents. For example, is there standard way to provide a "buy" permission, or agentic commerce agents?

I've seen a some stuff, but wanted to get community input.

4 コメント

kifler3 か月前

There is GNAP (https://datatracker.ietf.org/doc/rfc9635/) which is predicated on PBAC. Particular for agentic AI, I think it is sort of falling into a sort of RXC model: read/execute (inc. write), and commit. The X portion is a bit wonky but basically comes down to can the agent trigger a function.

lyfeninja3 か月前

Wow truly surprised by the lack of comments here. I just assumed there would be something I didn't know about.

gtirloni3 か月前

Check back in 5-10 years, not joking.

shamcleren3 か月前