Agents can register themselves
Dynamic Client Registration (RFC 7591) lets an AI agent become an OAuth client without a human provisioning one.
Added
4- AuthenticationDynamic Client Registration (RFC 7591), so an agent can register itself as a client instead of waiting on someone to create one by hand.
- AuthenticationPer-user agent sessions, so an agent acts as the person who authorized it rather than as a shared identity.
- AuthenticationScopes and app-minted tokens, giving you control over what an agent is allowed to reach.
- ConsoleAn audit trail for client lifecycle events, recording which registrant created each client.
Improved
1- AuthenticationRedirect URI and PKCE handling hardened, and duplicate OAuth2 clients de-duplicated.