Your AI Agent Passed OAuth. Now What? The Authorization Gap Nobody Talks About

Authentication proves your AI agent is who it says it is. Authorization controls what it can actually do. In 2026, almost every AI agent stack nails the first and completely skips the second. That's not a minor oversight. It's a category of breach waiting to happen. TL;DR OAuth and API keys tell you who your agent is. They say nothing about what it should be allowed to do. AI agents can have valid credentials and still take actions their owners never intended. Zero Trust for agentic systems means continuous per-action authorization, not just one-time identity verification. Pre-action authorization is how you enforce this: check the intended tool call before it executes, not after. The pattern is borrowed from fintech. Your bank doesn't stop at "who are you?" It also asks "is this transaction normal for you?" The problem: Authenticated is not the same as authorized Here's how most AI agent stacks work today. You give your agent an API key. The agent authenticates. The agent can now call