Zalando Releases Open-Source OAuth Broker for Scoped AI Agent Access

Zalando Incubator has released the Agentic Identity Broker (AIB), an MIT-licensed OAuth2 broker that lets users grant AI agents scoped, revocable access to MCP services. The tool aims to address corporate challenges such as delegating tasks without sharing full user tokens, linking fragmented identity systems, and centralizing tool approvals and audit logs. Users consent once per agent and service, with third-party tokens stored encrypted, and a gateway performs RFC 8693 token exchange at request time so agents never see user credentials. The v0.1 release is already running in production across hundreds of agents and dozens of MCP servers, with planned support for headless agents and intent-based authorization.