Delegation Chain
A delegation chain is an authorization propagation mechanism in multi-level agent or service-call scenarios, through which credentials and permissions are passed sequentially from the original user to AI agents and downstream tools or sub-agents. Each transfer requires progressively narrowing the permission scope while maintaining traceability, typically implemented via protocols such as OAuth 2.0 Token Exchange.
Timeline (last 90 days)
If each layer of delegation appends a complete assertion, token size grows linearly with the delegation depth, causing the assertion bloat problem.
If the delegation chain is poorly designed, an attacker who controls one link in the chain can laterally expand access boundaries under the cover of a legitimate token—this is a new variant of the confused deputy attack in Agent scenarios.
All Facts (2)
If each layer of delegation appends a complete assertion, token size grows linearly with the delegation depth, causing the assertion bloat problem.
50%UnverifiedIf the delegation chain is poorly designed, an attacker who controls one link in the chain can laterally expand access boundaries under the cover of a legitimate token—this is a new variant of the confused deputy attack in Agent scenarios.
50%