Together, these approaches make access and authority specific to where an agent runs and what it is doing.
From the Field Notes:
Agent permissions are moving closer to each action
In one minute
Cloudflare can place company login in front of individual Workers or every Worker in an account. Vercel Connect issues short-lived, task-scoped tokens, ElevenLabs uses OAuth with a deliberately scoped tool set, and Cloudflare Wallets bounds agent spending with allowances and transaction limits.