We saw how 30 AI agent projects handle authorization-93% use unscoped API keys
We reviewed 30 of the most popular AI agent projects on GitHub (OpenClaw, AutoGen, CrewAI, LangGraph, MetaGPT, AutoGPT, etc.) across six authorization criteria: scoped permissions, per-agent identity, user consent, revocation, audit trails, and delegation control. Key findings: - 93% rely on unscoped API keys as the only auth mechanism - 0% have per-agent cryptographic identity -...