Get the latest tech news

The Age of Agent Experience

AI agents are here—from ChatGPT Operator to coding tools like Devin and Lovable, there’s a rapid growth of products that can interact with websites on our behalf. It’s time to start building for a new persona: the autonomous agent. Instead of just designing experiences for human users, we need to think carefully about how machines will access data and perform actions securely, with transparency and user consent.

For example, when moving large amounts of money, executing on a write action that impacts your production code, or similar, there should be an approval workflow that requires the human user’s input. CIBA (Client-Initiated Backchannel Authentication): This OpenID Connect flow is handy for high-risk actions (e.g., making large stock trades) because it ensures the user must explicitly confirm. Many agent demos are basically letting an AI browse your site like a slow, not-so-smart human—and ignoring that OAuth flows already exist for secure, user-centric delegation.

Get the Android app