Ask HN: What standards or protocols exist for AI Agent permissions

2 pointsby lyfeninja3 ay önce3 comments

Curious what standards exist for AI agent permissions. Something like Linux read, write, execute types, but for AI agents. For example, is there standard way to provide a "buy" permission, or agentic commerce agents?

I've seen a some stuff, but wanted to get community input.

4 comments

kifler3 ay önce

There is GNAP (https://datatracker.ietf.org/doc/rfc9635/) which is predicated on PBAC. Particular for agentic AI, I think it is sort of falling into a sort of RXC model: read/execute (inc. write), and commit. The X portion is a bit wonky but basically comes down to can the agent trigger a function.

lyfeninja3 ay önce

Wow truly surprised by the lack of comments here. I just assumed there would be something I didn't know about.

gtirloni3 ay önce

Check back in 5-10 years, not joking.

shamcleren3 ay önce