https://speakerdeck.com/jeffishar 2026-10-28 20:16:26 -0400 Agents aren’t replacing microservices. They’re a new kind of API consumer, and they hit the same constraints: rate limiting, security, observability and failure. What changes is the unit: tokens instead of requests, delegation instead of a single caller, reasoning traces instead of plain logs. Slides from my talk at #APIDays. Agents aren’t replacing microservices. They’re a new kind of API consumer, and they hit the same constraints: rate limiting, security, observability and failure. What changes is the unit: tokens instead of requests, delegation instead of a single caller, reasoning traces instead of plain logs. Slides from my talk at #APIDays. Thu, 29 Oct 2026 00:00:00 -0400 https://speakerdeck.com/jeffishar/from-microservices-to-multi-agent-systems-same-apis-new-rules https://speakerdeck.com/jeffishar/from-microservices-to-multi-agent-systems-same-apis-new-rules When a user asks an agent to do something, and that agent calls another agent, which calls an API, whose request is it by the time it arrives? We followed one request hop by hop and looked at how to keep both the user and the agent visible all the way down: delegation instead of impersonation with token exchange (RFC 8693), tokens bound to their audience with resource indicators (RFC 8707), and a human approval step with CIBA for the risky actions. When a user asks an agent to do something, and that agent calls another agent, which calls an API, whose request is it by the time it arrives? We followed one request hop by hop and looked at how to keep both the user and the agent visible all the way down: delegation instead of impersonation with token exchange (RFC 8693), tokens bound to their audience with resource indicators (RFC 8707), and a human approval step with CIBA for the risky actions. Wed, 28 Oct 2026 00:00:00 -0400 https://speakerdeck.com/jeffishar/on-behalf-of-whom https://speakerdeck.com/jeffishar/on-behalf-of-whom