AI Agents and OAuth Applications

What Are OAuth Applications and AI Agents

An OAuth application lets a trusted third-party application or AI agent access ORBSIS after the user grants authorization. For example, a finance-automation AI agent can query Budgets and transaction records on the user’s behalf after OAuth authorization without receiving the user’s account password.

Why OAuth Authorization Is Required

OAuth limits third-party applications or agents to the scope explicitly authorized by the user. Users can view or revoke connected applications at any time, making OAuth safer and more controllable than sharing account passwords. For direct server-side REST API calls, use an API Key rather than treating user OAuth credentials as a backend secret.

How to Manage OAuth Applications

View Connected Agents

Register an OAuth Application

Click Register Application and enter an identifiable application name.

Enter the callback URL required by the application and request only the permissions that are necessary.

Save the Client ID and other configuration, and store the secret securely as instructed on the page.

Complete authorization testing before releasing the application to production users.