How to Let AI Agents Sign Up for Your App Safely — Isabelle Williams, WorkOS

Isabelle Williams, a product manager at WorkOS, uses a travel app she built to show how to make an app ready for users who arrive as agents. She covers auth.md, an open file that tells agents how to get access; an anonymous mode where an agent can try the app before a person claims its work; and ID-JAG identity assertions, which let the agent's provider vouch for the user so nobody has to fill in a signup form. In a live demo, an agent signs up, plans a trip and books dinner on its own. She then shows how to give an in-app agent its own scoped token so it can be audited, limited and revoked without touching the user's access. Chapters: - 00:00 Intro - 00:39 The demo app: Waypoint - 01:07 Three questions for agent-ready apps - 02:02 auth.md: a front door for agents - 03:45 Anonymous mode and claiming an agent's work - 04:50 Skipping signup with identity assertions - 07:22 What is an ID-JAG? - 09:15 Demo: an agent signs up and plans a trip - 11:22 Why this needs open standards - 11:49 Limiting and revoking agents - 14:46 Demo: a scoped funding agent - 17:44 Takeaways Isabelle Williams, WorkOS: https://workos.com Join us in SF for the second annual AIE CODE summit: https://aie.codes our last flagship summit of 2026. Applications live now!