Auth0 AI is a set of JavaScript packages for authenticating users and authorizing AI agents that act on their behalf. It covers login flows built for agents and assistants, calling third-party APIs on a user's behalf using standard token exchange, restricting retrieval-augmented generation to documents the user is allowed to see, and pausing an autonomous run for asynchronous human approval.
The base package @auth0/ai holds the authentication and authorization abstractions, and framework packages adapt them to specific agent stacks. A Redis-backed store persists credentials and authorization requests, and a React component library covers the user-facing parts of the flow. Runnable examples in the repository demonstrate async user confirmation, authorization for RAG, and authorization for tools.
The packages follow semantic versioning, and the project notes that major versions may be released frequently while the API is still changing, so pinning versions is advised in production.
Features
- User authentication: login experiences intended for AI agents and assistants
- Calling APIs on a user's behalf: token exchange so a tool can reach another product as the signed-in user
- Authorization for RAG: retrieval limited to the documents the requesting user has access to
- Async user confirmation: an agent runs in the background and waits for human approval when a step needs it
- Framework packages: integrations for Genkit, LlamaIndex.TS, LangChain.js, and the Vercel AI SDK
- Credential store: a Redis-based store for credentials and authorization requests
- UI components: React components for wiring the authorization flow into an interface
