← back
Full Workshop: Better Auth — Paola Estefania, Better Auth
Takeaway
Give each agent an auditable identity and narrowly delegated capabilities so access can be understood and revoked.
Summary
- The Better Auth workshop argues that agents should receive distinct identities and delegated authority instead of borrowing a user's full credentials.
- Three core requirements are service discovery, fine-grained authorization, and attribution of actions to a specific agent and user.
- Capability-level grants narrow what an agent can do and make individual revocation and audit trails possible.
- The proposed protocol uses a well-known configuration endpoint and capability discovery, with directories and OpenAPI information helping bridge existing services.
agent-identityauthorizationbetter-auth
Original description
Better Auth has grown to 27k GitHub stars and more than 1.5M weekly downloads, becoming a popular choice for developers who want to own their authentication stack. Agent Auth is a protocol for autonomous and delegated agents operating services for an organization or a user. It lets agents dynamically negotiate capabilities, manage access boundaries, and maintain secure authorization flows. This session breaks down the protocol design and demonstrates it live. Speakers: Bereket Habtemeskel — CEO, Better Auth Bereket is the Founder and CEO of Better Auth, the most popular auth framework for TypeScript, and a co-author of the Agent Auth protocol. X/Twitter: https://x.com/bekacru LinkedIn: / bekacru Paola Estefania — Staff Engineer, Better Auth Paola focuses on agent identity and is a co-creator of the Agent Auth protocol. LinkedIn: / paolaestefaniadecamposdefranco