Agent + On-Behalf-Of + DPoP
An agent that exchanges a user token for a downstream token and binds every call to a private key.
Open brief →
Portfolio projects · IAM for AI Agents
Build the systems, not just the vocabulary
Start a project as soon as you finish the foundations module, then extend it as later modules land.
MCP server marketplace with OAuth + signing
A registry of MCP servers with dynamic client registration, signature verification, and tool pinning.
Open brief →Credential broker for tools
A broker that mints just-in-time, narrowly scoped credentials per tool call and logs every issuance.
Open brief →Human-in-the-loop approval platform
Out-of-band approvals via CIBA with budgets, timeouts, and a full decision log.
Open brief →End-to-end Agent IAM platform
The capstone: identity, policy, brokering, approvals, and audit in one deployable platform.
Open brief →Entra Agent ID + Agent 365 governance platform
The same capstone goals implemented natively on the Microsoft stack.
Open brief →