draft-embesozzi-oauth-agent-native-authorization

OAuth 2.0 Agents Native Authorization via Structured Elicitation

groupnone stateactive pages17 rev00 expires2026-10-05 canonicalhttps://datatracker.ietf.org/doc/draft-embesozzi-oauth-agent-native-authorization/
This document defines a Structured Elicitation extension to the OAuth 2.0 First-Party Applications (FiPA) specification [FiPA], establishing a standard metadata format for FiPA authorization challenge responses. FiPA leaves the format for advertising available authenticators and their required inputs undefined, preventing interoperable implementation by AI Agents and other non- browser clients. This extension adds an elicitations array to the FiPA Authorization Challenge Response, providing a standard metadata format for authenticator challenges. Model Context Protocol (MCP) Elicitation [MCP-Elicitation] is the normative reference binding. This specification covers the just-in-time (JIT) authorization for AI Agents executing on behalf of users in Human-to-Agent (H2A) flows.