me: “auth will only take 5 minutes”
also me, 3 hours later:
OAuth consent screen ✅
redirect URI ✅
scopes ✅
PKCE ✅
browser: lol try again
#OAuth#BuildInPublic
Cloudflare just built a way for agents to pay for anything behind them
pages, APIs, data, MCP tools.
read to the end and they say the quiet part out loud:
some resources need "proof of who the agent is and who it acts for."
payment was the easy layer. identity is the game now.
OpenAI's new model line, by the numbers.
Sol → $5 in / $30 out
Terra → $2.50 / $15
Luna → $1 / $6 (per 1M tokens)
frontier-tier capability now starts at a dollar.
every AI security report in 2026 says the same thing in different words:
agents have too much access and nobody's watching what they do with it.
identity for agents is a missing primitive.
A dormant credential nobody remembered just exposed ~two dozen companies' Salesforce data.
No password was cracked. No MFA bypassed. No employee phished.
The attacker stole the OAuth tokens and to Salesforce, the token is the integration.