Guides on connecting AI agents to real systems safely.https://agenticfabriq.github.io/https://agenticfabriq.github.io/connect/https://agenticfabriq.github.io/connect/Four ways an agent gets access to a system — shared key, per-user OAuth, service identity, brokered — compared on attribution, blast radius, and cost.Tue, 18 Aug 2026 00:00:00 GMThttps://agenticfabriq.github.io/connect/databases/https://agenticfabriq.github.io/connect/databases/Give an agent a dedicated Postgres role, row-level security keyed to the acting user, statement timeouts, and parameterized tools instead of raw SQL.Tue, 18 Aug 2026 00:00:00 GMThttps://agenticfabriq.github.io/connect/drive-and-notion/https://agenticfabriq.github.io/connect/drive-and-notion/Pick drive.file over the restricted Drive scopes, put the Picker in the grant loop, and understand why one Notion share hands over a whole page subtree.Tue, 18 Aug 2026 00:00:00 GMThttps://agenticfabriq.github.io/connect/frameworks/https://agenticfabriq.github.io/connect/frameworks/One tool built three times in LangChain, CrewAI, and the OpenAI Agents SDK, with the per-user credential resolved at call time rather than at import.Tue, 18 Aug 2026 00:00:00 GMThttps://agenticfabriq.github.io/connect/github/https://agenticfabriq.github.io/connect/github/Use a GitHub App installation token instead of a PAT: sign the JWT, scope it to named repositories, open a pull request, and revoke it when the run ends.Tue, 18 Aug 2026 00:00:00 GMThttps://agenticfabriq.github.io/connect/gmail/https://agenticfabriq.github.io/connect/gmail/Pick the narrowest Gmail scope, run the PKCE consent flow, refresh tokens correctly, and avoid the seven-day expiry that breaks Testing-status apps.Tue, 18 Aug 2026 00:00:00 GMThttps://agenticfabriq.github.io/connect/mcp-servers/https://agenticfabriq.github.io/connect/mcp-servers/Where MCP authentication really sits, how to authorize per tool and per argument, and why a server that lets the model choose the target is a confused deputy.Tue, 18 Aug 2026 00:00:00 GMThttps://agenticfabriq.github.io/connect/slack/https://agenticfabriq.github.io/connect/slack/Which Slack bot scopes an agent needs, how to verify the request signature, Socket Mode versus a request URL, and the rate limits that throttle reads.Tue, 18 Aug 2026 00:00:00 GMThttps://agenticfabriq.github.io/fail/https://agenticfabriq.github.io/fail/The six ways agent integrations fail, why none of them page you, and the incident order that works: stop the agent, revoke, scope the reach, then rotate.Tue, 18 Aug 2026 00:00:00 GMThttps://agenticfabriq.github.io/fail/over-scoped-oauth/https://agenticfabriq.github.io/fail/over-scoped-oauth/An over-scoped agent throws no errors. Diff the scopes you granted against the ones it actually called, then narrow the grant without stranding users.Tue, 18 Aug 2026 00:00:00 GMThttps://agenticfabriq.github.io/fail/runaway-loops/https://agenticfabriq.github.io/fail/runaway-loops/Why agent loops run away, how retries multiply across layers, and the run budgets, jittered backoff, breakers and idempotency keys that actually stop it.Tue, 18 Aug 2026 00:00:00 GMThttps://agenticfabriq.github.io/fail/token-leakage/https://agenticfabriq.github.io/fail/token-leakage/How an API key in an agent's context escapes into traces, logs, model output and injected requests, and how a credential broker closes the whole class.Tue, 18 Aug 2026 00:00:00 GMThttps://agenticfabriq.github.io/govern/https://agenticfabriq.github.io/govern/An AI agent is its own kind of principal. Model it as agent, user, resource and action, decide at call time, and prove revocation works one cell at a time.Tue, 18 Aug 2026 00:00:00 GMThttps://agenticfabriq.github.io/govern/audit/https://agenticfabriq.github.io/govern/audit/What belongs in an AI agent audit log, field by field: both principals, the policy decision, an append-only store, redaction, and how long to keep it.Tue, 18 Aug 2026 00:00:00 GMThttps://agenticfabriq.github.io/govern/credentials/https://agenticfabriq.github.io/govern/credentials/Why an environment variable cannot express per-user access, how to issue a short-lived credential per request, and how to rotate with no downtime.Tue, 18 Aug 2026 00:00:00 GMThttps://agenticfabriq.github.io/govern/delegated-identity/https://agenticfabriq.github.io/govern/delegated-identity/Acting for a user is not acting as one. How to run an on-behalf-of token exchange, intersect agent and user permissions, and audit both principals.Tue, 18 Aug 2026 00:00:00 GMThttps://agenticfabriq.github.io/govern/least-privilege/https://agenticfabriq.github.io/govern/least-privilege/Enumerate an agent's actions from its tool definitions, map each to the narrowest provider scope, remove the rest, and report unused scopes monthly.Tue, 18 Aug 2026 00:00:00 GMThttps://agenticfabriq.github.io/govern/oauth-flows/https://agenticfabriq.github.io/govern/oauth-flows/The three OAuth grants an AI agent actually needs, why RFC 8693 token exchange is the one most teams skip, and how to scope a downstream token down.Tue, 18 Aug 2026 00:00:00 GMT