The way we interact with the internet is changing. Early this week we partnered with Vercel to support the adoption of Web Bot Auth, giving agents a cryptographic way to prove their identity on the internet. But Web Bot Auth alone doesn’t let them safely access the parts of the internet we rely on most: the ones behind logins.
Today, we’re excited to introduce Managed Auth: a standardized way to let agents log in and stay logged in across the internet.
The browser is the auth primitive
The browser remains the primary gateway to the internet. So we set out to build Managed Auth around giving your agent a browser with scoped access to specific sites, always with the end user’s consent.
Out of the box, Managed Auth supports 2FA, SSO, and 1Password and automatically refreshes login sessions so agents can keep working without additional user interaction. To simplify the initial setup, we provide a hosted UI to securely collect the credential from your users. Under the hood, a verified agent securely extracts those login details and signs you in to any website, powered by our partnership with Vercel.
This prevents developers from having to reinvent the wheel with their own systems: collecting credentials from users for each site, storing them somewhere “safe,” designing consent flows, handling MFA, and injecting secrets into an agent loop without exposing them in plaintext.
Only give agents an authenticated browser
Importantly, this approach never exposes your credentials to LLMs, while still giving them authenticated access to navigate dashboards, download reports, and browse the entire internet on your behalf. If something goes wrong, you can simply end the browser session and the agent immediately loses access.
Where this is going
Managed Auth was developed in close collaboration with developers building browser agents that automate everything from managing EHR workflows and answering calls to purchasing on e-commerce sites and manufacturing procurement. This is a big step toward solving authentication for agents on the internet. If you’re exploring the future of agent identity, we’d love to collaborate. Reach out to partnerships@kernel.sh. And if you want to learn more about how to get started with Managed Auth, checkout out our docs.