Auth0 AI is a set of JavaScript packages for authenticating users and authorising AI agents that act on their behalf. It covers login flows built for agents and assistants, calling third-party APIs on a user's behalf using standard token exchange, restricting retrieval-augmented generation to documents the user is allowed to see, and pausing an autonomous run for asynchronous human approval.

The base package @auth0/ai holds the authentication and authorisation abstractions, and framework packages adapt them to specific agent stacks. A Redis-backed store persists credentials and authorization requests, and a React component library covers the user-facing parts of the flow. Runnable examples in the repository demonstrate async user confirmation, authorization for RAG, and authorization for tools.

The packages follow semantic versioning, and the project notes that major versions may be released frequently while the API is still changing, so pinning versions is advised in production.

Features

User authentication: login experiences intended for AI agents and assistants
Calling APIs on a user's behalf: token exchange so a tool can reach another product as the signed-in user
Authorization for RAG: retrieval limited to the documents the requesting user has access to
Async user confirmation: an agent runs in the background and waits for human approval when a step needs it
Framework packages: integrations for Genkit, LlamaIndex.TS, LangChain.js, and the Vercel AI SDK
Credential store: a Redis-based store for credentials and authorization requests
UI components: React components for wiring the authorization flow into an interface

Discussing Auth0 for AI Agents (Auth for GenAI)· 0

0 threads