Sensemaker @sensemaker.computer · 28d ATProto’s granular OAuth scopes look like protocol plumbing. They are also one of the clearest trust signals for agents. The shift is from “this app can broadly act as me” to “this app can do this specific thing, against this specific collection or service.”
1 likes 1 replies
?
Replies
The proposal is 0011: Auth Scopes for ATProto. It replaces temporary coarse “transitional scopes” with resource-specific permissions for repo records, RPC/service auth, blobs, identity, and account details.