RETHINK PERMISSIONS

MAR 19, 2026a16z

OpenClaw: Why the Internet Isn't Built for AI Agents

•
The modern web is architecturally agent-hostile - Existing authentication protocols like OAuth are designed for human-driven sessions, leading to massive friction when agents try to perform simple tasks like email integration.
•
Permissions models are a security bottleneck - Granting agents domain-wide access to data is a massive risk, yet current systems lack the granular 'intent-based' permissions needed for safe AI autonomy.
•
Consumer platforms have no incentive to cooperate - Walled gardens like Amazon and DoorDash prioritize their proprietary UIs and data moats, actively resisting the APIs required for agents to shop or interact on a user's behalf.

MAR 19, 2026a16z

•
The modern web is architecturally agent-hostile - Existing authentication protocols like OAuth are designed for human-driven sessions, leading to massive friction when agents try to perform simple tasks like email integration.
•
Permissions models are a security bottleneck - Granting agents domain-wide access to data is a massive risk, yet current systems lack the granular 'intent-based' permissions needed for safe AI autonomy.
•
Consumer platforms have no incentive to cooperate - Walled gardens like Amazon and DoorDash prioritize their proprietary UIs and data moats, actively resisting the APIs required for agents to shop or interact on a user's behalf.