Least privilege for your customers' AI agents

FusionAuth 1.70 introduces Client ID Metadata Document (CIMD) registration and RFC 8693 OAuth token exchange to give AI agents, including MCP servers, narrowly scoped delegation tokens with actor attribution rather than broad user credentials. The release also adds a Recorded Intent extension that logs an agent's stated objective for audit review, and offers entity-based or lambda-based policy engines for deterministic, testable authorization.