Focused review for agent auth boundaries

Agent Auth and Cookie Vault Security Review

A USD $299 focused security review for one agent auth flow: token broker, cookie vault, `site_login`, OAuth, CIBA/AAuth, HITL consent, authenticated scraping, or browser-session handoff. The output is a boundary map, ranked risks, and tests that show where auth state can leak, be replayed, or get applied to the wrong user.

Request auth review Quick scan packages Run free scanner View full sprint quote

EntryUSD $99 Quick Scan

FocusedUSD $299 Agent Auth Focused Review

FullUSD $1,000 Full Audit Sprint

Start RulePayment only after written scope acceptance

When to use it

Use this when auth becomes an agent tool

This page is for teams turning login, browser sessions, delegated auth, or user credentials into agent-readable state. It is narrower than the full audit sprint and deeper than a scanner pass.

site_login / site_logout: agents that log into third-party websites, preserve sessions, or expose login state to tools.

Cookie vault: encrypted cookie storage, browser profile reuse, consent capture, vault export, and cleanup logic.

Token broker: OAuth, CIBA, AAuth, device flow, token exchange, refresh, rotation, expiry, and provider scoping.

Authenticated scraping: tools that crawl user-visible pages, download files, or summarize private web content.

Workspace connectors: email, docs, calendar, CRM, tickets, drive, and admin APIs with user or tenant authority.

Review checklist

What I check in the auth boundary

The review follows the data path from user consent to agent action, cache writes, logs, and revocation. It looks for practical defects that are easy to miss when auth is added late.

eTLD+1, path, SameSite, Secure, expiry, redirect, and domain-injection behavior for cookies.

SSRF and private-network fetch paths that can accidentally carry user cookies or bearer tokens.

User, tenant, workspace, browser-profile, and session isolation in cache key design.

Prompt/tool injection paths from authenticated pages, downloaded files, logs, memory, and RAG content.

Token replay, refresh-token rotation, provider scope drift, logout, revocation, and account-switch handling.

HITL consent gates for STDIO/local display, browser takeover, file download, form submit, and write actions.

Redaction for cookies, headers, bearer tokens, URLs, screenshots, traces, errors, and audit logs.

USD $299 output

Focused review deliverables

The focused package reviews one agreed flow. It is designed for maintainers who need a decision-ready outside pass before shipping the auth feature or before funding a full sprint.

Request $299 auth review

Boundary map: users, tenants, sessions, tokens, cookies, vault entries, tools, and external providers.

Ranked risks: concise findings with evidence, impact, and lowest-risk fix path.

Test checklist: negative tests for wrong-user state, cache bleed, SSRF with cookies, token expiry, replay, and redaction.

Operator guardrails: acceptance criteria for consent, logging, storage, cleanup, and launch gates.

Upgrade path: if the auth review expands into broader agent/tool risk, the full USD $1,000 sprint can be scoped separately.

Public checklist examples

Useful technical context before buying

These are public issue comments with review checklists, not paid customer work. They show the kind of boundary thinking this focused package turns into a scoped deliverable.

Authsite_login and cookie-vault checklist

ModelMCP threat-model matrix example

SecretsSecrets lifecycle and redaction checklist

FreeRun the no-execution scanner before opening a paid scope

Payment packet

Copy after scope acceptance

Do not send secrets, private cookies, access tokens, private keys, or customer data in public GitHub issues. Payment is requested only after the written scope is accepted.

Submit payment proof Review terms

Copyable packet

I accept the Agent Auth and Cookie Vault Security Review package.

Package: USD $299 Agent Auth Focused Review
Scope: [one token broker, cookie vault, site_login, OAuth/HITL, or authenticated browser flow]
Delivery: [public issue comment or private Markdown report]
Payment timing: after written scope acceptance only.

Ethereum address (ETH or ERC-20 USDC/USDT/DAI):
0xa7F2235a77FBc4eCcbF60923BCDF6Df74eC710FF

Solana address (SOL or SPL USDC):
5CjUaMAsbXx2Hjczwoqi4MChTU1KjfUzbdiwPqZeceVM

Payment proof form:
https://github.com/jackjin1997/agent-audit-sprint/issues/new?template=payment-confirmation.yml