What is an AI agent in this context? A software bot (like OpenCLAW, Claude Code, etc.) that makes API calls to access protected resources. Instead of sharing long-lived API keys, your agents can authenticate using OAuth 2.0 Client Credentials and receive short-lived JWT tokens.

Why?

     No more sharing API keys
     Short-lived tokens (configurable)
     Easy credential rotation
     Industry-standard security