FusionAuth 1.70 Lets Companies Securely Open Their Apps to Customers' AI Agents

CIMD support and OAuth token exchange let companies connect MCP-compatible AI apps and govern access on behalf of customers.

BOULDER, Colo., Oct. 29, 2026 /PRNewswire/ -- FusionAuth, the deploy anywhere Customer Identity and Access Management (CIAM) platform built for security, control, and scale, today announced FusionAuth 1.70, adding Client ID Metadata Document (CIMD) support and OAuth token exchange to help companies securely open their applications to customers' AI agents.

AI agents give companies new ways to reach and serve customers, from sending invoices and buying tickets to ordering food and updating accounts. Yet 88% of organizations surveyed for FusionAuth's 2026 State of AI and Identity report said AI deployment is outpacing their identity and security infrastructure. For companies building Model Context Protocol (MCP) servers, that raises two questions: which AI apps can connect, and what access they should receive.

FusionAuth 1.70 includes:

• CIMD support: MCP-compatible AI apps can register automatically under rules the company sets so customers can sign in and approve access immediately instead of waiting on manual registration.
• OAuth token exchange (RFC 8693): Services can request access to another system on customer's behalf. Companies can configure policies to restrict the permissions granted, and FusionAuth records each exchange attempt and its policy decision.
• Recorded intent, beyond RFC 8693: Services can include an optional intent statement with a token exchange request, and FusionAuth adds it to the exchange record for audit. Application providers can start agents with least-privilege access and review those records during testing to add only the permissions each agent needs.

"Customers will hand agents bigger jobs once they trust the company on the other end," said Brian Bell, CEO of FusionAuth. "That trust starts with a clear record of who an agent acted for, what it was allowed to do, and why—all of it kept on infrastructure the company controls. AI can assist, but identity decides."

"Our customers now build digital experiences inside AI tools like Claude, Lovable, VS Code and Figma, so that's where Siteimprove.ai needs to be," said Sree Pisharody, Senior Principal Product Manager at Siteimprove. "The Siteimprove.ai MCP Server brings our Accessibility Agent straight into those environments, so issues are caught and fixed at the moment of creation, with Search and Analytics agents coming next. Every AI tool that connects to Siteimprove.ai has to be registered and authorized before it can access a customer's account. As a design partner on FusionAuth 1.70, we've seen how it handles that for us, so we don't have to build it ourselves."

CIMD support and OAuth token exchange are available today in FusionAuth 1.70 on the Enterprise plan. They run on the same FusionAuth platform that handles a company's customer sign-ins, whether in FusionAuth Cloud, in the company's own cloud, or in its own data center. FusionAuth doesn't charge per token exchange. Documentation can be found at fusionauth.io/docs.

About FusionAuth:

FusionAuth gives organizations control over their identity infrastructure without compromise. The platform supports the authentication methods modern applications need, including passwordless login, MFA, SSO, OAuth, and more, with enterprise-grade security, full data ownership, and pricing that remains predictable as companies scale.

FusionAuth can be deployed in FusionAuth Cloud, in a customer's own environment, on-premises, or anywhere in between. Thousands of organizations globally, including PwC, NRG Energy, Zenni Optical, Stihl, and DataStax, trust FusionAuth to secure millions of users without sacrificing control, compliance, or cost clarity.

Media Contact:
Tila Pacheco
Eskenzi PR
[email protected]

SOURCE FusionAuth