A Token Is Only as Good as the Check Before It Was Issued

An AI agent can have a valid token without proving it is the agent you intended to authorize. The problem starts with how the agent gets the token. If it relies on a static credential stored in a configuration file, anyone who obtains that credential may be able to use it to get a token.