All posts/ #ai-agents

Zitadel's roadmap: building the next iteration in the open

We’re building the next iteration of Zitadel in the open. Explore our community roadmap and see how we’re rethinking identity—from getting started in under a minute to enterprise scale and AI-native identity.

AI agents don't need to break in. That's the real problem.

AI agents don't need to break in to cause damage. When an agent is handed broad credentials for a narrow task, the identity layer can't tell the difference, and that's a structural problem with how access control was built.

I asked Claude to add auth to a Next.js app. Here's the exact prompt, and exactly what happened.