FusionAuth today announced FusionAuth 1.70, adding Client ID Metadata Document (CIMD) support and OAuth token exchange to help companies securely open their applications to customers’ AI agents.
AI agents give companies new ways to reach and serve customers, from sending invoices and buying tickets to ordering food and updating accounts. Yet 88% of organizations surveyed for FusionAuth’s 2026 State of AI and Identity report said AI deployment is outpacing their identity and security infrastructure. For companies building Model Context Protocol (MCP) servers, that raises two questions: which AI apps can connect, and what access they should receive.
FusionAuth 1.70 includes:
- CIMD support: MCP-compatible AI apps can register automatically under rules the company sets so customers can sign in and approve access immediately instead of waiting on manual registration.
- OAuth token exchange (RFC 8693): Services can request access to another system on customer’s behalf. Companies can configure policies to restrict the permissions granted, and FusionAuth records each exchange attempt and its policy decision.
- Recorded intent, beyond RFC 8693: Services can include an optional intent statement with a token exchange request, and FusionAuth adds it to the exchange record for audit. Application providers can start agents with least-privilege access and review those records during testing to add only the permissions each agent needs.
CIMD support and OAuth token exchange are available today in FusionAuth 1.70 on the Enterprise plan. They run on the same FusionAuth platform that handles a company’s customer sign-ins, whether in FusionAuth Cloud, in the company’s own cloud, or in its own data center. FusionAuth doesn’t charge per token exchange. Documentation can be found at fusionauth.io/docs.
Related
This entry was posted on October 29, 2026 at 3:36 pm and is filed under Commentary with tags FusionAuth. You can follow any responses to this entry through the RSS 2.0 feed.
You can leave a response, or trackback from your own site.
FusionAuth 1.70 Lets Companies Securely Open Their Apps to Customers’ AI Agents
FusionAuth today announced FusionAuth 1.70, adding Client ID Metadata Document (CIMD) support and OAuth token exchange to help companies securely open their applications to customers’ AI agents.
AI agents give companies new ways to reach and serve customers, from sending invoices and buying tickets to ordering food and updating accounts. Yet 88% of organizations surveyed for FusionAuth’s 2026 State of AI and Identity report said AI deployment is outpacing their identity and security infrastructure. For companies building Model Context Protocol (MCP) servers, that raises two questions: which AI apps can connect, and what access they should receive.
FusionAuth 1.70 includes:
CIMD support and OAuth token exchange are available today in FusionAuth 1.70 on the Enterprise plan. They run on the same FusionAuth platform that handles a company’s customer sign-ins, whether in FusionAuth Cloud, in the company’s own cloud, or in its own data center. FusionAuth doesn’t charge per token exchange. Documentation can be found at fusionauth.io/docs.
Share this:
Like this:
Related
This entry was posted on October 29, 2026 at 3:36 pm and is filed under Commentary with tags FusionAuth. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.