Multi-hop delegation for AI agents: porting OAuth's on-behalf-of pattern into MCP topologies
Bearer tokens do not survive composed agent tool calls. The pattern that does is one the IAM community settled in 2019: RFC 8693 Token Exchange with actor-chain claims, now being...
