use cases
Giving an Editorial AI Agent Permission to Fix One Article
Say an agent helps look after a few publications. Today’s job is small: tighten the opening paragraph of one article. It doesn’t need to touch other articles, …
Posts
explainers
How Task Grants Limit the Damage From Prompt Injection in AI Agents
Prompt injection is simple to describe and hard to stop. An agent reads some text as part of its job: a web page, a support ticket, a comment on a post. Somewhere in that …
notes
How Tokening 0.1 Was Tested
Tokening makes one claim that matters more than the rest: a one-use grant allows one call. So that’s where most of the testing went, along with the boring work of …
case studies
How Tokening Stops Parallel AI Agents From Spending One Grant Twice
A call can be perfectly in scope and still arrive at the wrong moment. Picture two workers that picked up the same task. Both hold the same one-use grant. Both send the …
explainers
How Tokening Works Between an AI Agent and Your API
Tokening sits in the middle. The agent talks to Tokening, Tokening talks to your API, and the agent never learns how to reach the API on its own. A grant goes through …
case studies
Inside the Tokening WordPress Demo, Step by Step
The demo on this site is a recording, and it’s worth knowing what was recorded and how, because a demo is only as good as the checks behind it. Everything below …
use cases
Limiting a REST Maintenance Agent to One Record Change
Not every agent speaks MCP. Plenty of useful work is a plain REST call to an internal service: update a note on a customer record, close a ticket, change a flag. The …
releases
Tokening 0.1 Gives AI Agents Single-Use API Grants
An agent needs to fix the title of one blog post. To do that today it usually gets an account password, and that password can also delete the post, publish drafts and …
explainers
Tokening Compared With API Keys, OAuth Scopes and MCP Gateways
There are already several ways to limit what software can do with an API. Most were built for people or for long-running services. Agents need something slightly …
guides
Using Tokening With Claude Code, Cursor and Claude Desktop
Most people meet MCP through a coding assistant or a desktop chat app. Each of them can talk to an HTTP MCP server and send a bearer token, which is all Tokening needs. …