Conceptdelegation chain / 委托授权链
Delegation Chain
A delegation chain is an authorization propagation mechanism in multi-level agent or service-call scenarios, through which credentials and permissions are passed sequentially from the original user to AI agents and downstream tools or sub-agents. Each transfer requires progressively narrowing the permission scope while maintaining traceability, typically implemented via protocols such as OAuth 2.0 Token Exchange.
Timeline (last 90 days)
Sep 21
If the delegation chain is poorly designed, an attacker who controls one link in the chain can laterally expand access boundaries under the cover of a legitimate token—this is a new variant of the confused deputy attack in Agent scenarios.
Unverified50%