Your agent calls a third-party API for a user who never connected it. What to send back, why 401 and 403 are both already taken, and what the x402 standard means for the answer.
How to tell an AI agent that its user needs to authorize
calendar_today
August 11, 2026
domain
workos