·E58

Are AI Agents Ready for the Internet? (ft Bobbie Chen)

September 23

46 mins

View Transcript

Episode Description

Join the Tool Use Discord: https://discord.gg/PnEGyXpjaX

Are you ready for AI agents to browse the web? We explore the future of AI agent authentication, web security, and API design in this deep dive. As AI agents proliferate, critical questions arise: how do we handle security without giving an agent your password? How can we make websites optimized for agent consumption? We're joined by Bobbie Chen, a product manager at Stytch specializing in bot and AI agent detection, to discuss the risks and opportunities.

We cover how OAuth can provide safer, scoped permissions for agents, and the emerging open standard Web Bot Auth, which allows agents to cryptographically prove their identity. Bobbie breaks down Simon Willison's "lethal trifecta" of AI security risks and discusses strategies for mitigating malicious behavior. We also touch on the future of AI SEO, how API design must evolve for a hybrid human-agent world, and the potential impact of agents on web monetization and advertising.

Learn more from Bobbie Chen:

Stytch supports Web Bot Auth: https://stytch.com/blog/stytch-supports-web-bot-auth

Stytch Connected Apps (OAuth for AI agents): https://stytch.com/connected-apps

Stytch Fraud and Risk Prevention: stytch.com/fraud

AGI Builders Meetup: https://luma.com/agibuilders

IsAgent SDK for agent identification: https://IsAgent.dev

Additional Resources from the episode:

Simon Willison's lethal trifecta: https://simonwillison.net/2025/Jun/16/the-lethal-trifecta

IETF Web Bot Auth: https://datatracker.ietf.org/doc/bofreq-nottingham-web-bot-auth/

Jon Postel as "benevolent dictator" of IANA: http://memex.org/meme4-01.html

Freestyle Cloud: https://www.freestyle.sh

Connect with us