cs.AIMar 18, 2026

Access Controlled Website Interaction for Agentic AI with Delegated Critical Tasks

Authors: Sunyoung Kim, Hokeun Kim

Organizations: Arizona State University Tempe, AZ, USA

Read PDF
Ask AI
Cite

Copy citation

DOINot available for this paper

Abstract

Recent studies reveal gaps in delegating critical tasks to agentic AI that accesses websites on the user's behalf, primarily due to limited access control mechanisms on websites designed for agentic AI. In response, we propose a design of website-based interaction for AI agents with fine-grained access control for delegated critical tasks. Our approach encompasses a website design and implementation, as well as modifications to the access grant protocols in an open-source authorization service to tailor it to agentic AI, with delegated critical tasks on the website. The evaluation of our approach demonstrates the capabilities of our access-controlled website used by AI agents.

Figures & tables

Figure 1. Our proposed system’s workflow for secure access delegation of our approach, where the user grants delegated access to the agent for accessing the website. The user delegates access to an agent, which retrieves a session key from Auth. The website independently verifies the session key with Auth.
Figure 2. Extended Auth database tables supporting secure access delegation with example data rows. We added a new target type, Delegation, in table (b), defining which agent groups and the website can receive delegated access from a user. We also added the ExpectedOwnerGroups in table (c), which restricts which entities are allowed to obtain a session key.
Figure 3. Overview of our website design. Description
Figure 4. Website workflows from the perspective of (a) human users and (b) AI agents. Description
Evaluation AspectTest ScenarioExpected BehaviorObserved Results
AuthenticationAgent computes HMAC with correct session keyLogin succeeds only with valid key100% success with correct key; 0% with invalid key
Fine-Grained Access ControlLow-trust agent requests email and phone fieldsAllowed: email; Denied: phoneemail returned 200; phone blocked 403
Unauthorized Access HandlingInvalid agent requests session key or repeats requestAuth rejects unauthorized or repeated requestUnauthorized: 100% refused; Repeated request: 100% rejected
Session ManagementSession used after relative validity periodSession should be terminated automatically100% Auto terminated
Table 1. Summary of aspects validated by our evaluation.
Figure 5. Comparison of delegated-access latency across trust levels and unauthorized requests.
More in this topic

Tool Access Control for LLM Agents

Tool access control for LLM agents limits which tools, resources, and actions agents may use, and under what conditions.

See all 219 papers

Explore similar work

CardsList

  1. AC4A: Access Control for Agents

    Mar 21, 2026Reshabh K Sharma, Dan GrossmanTool Access Control for LLM AgentsLLM Agent Security

    University of Washington, Seattle, Washington, USA

  2. WebSP-Eval: Evaluating Web Agents on Website Security and Privacy Tasks

    Apr 7, 2026Guruprasad Viswanathan Ramesh, Asmit Nayak, Basieem Siddique +1Web AgentsLLM Agent Evaluation

    University of Wisconsin-Madison

  3. Web$hell: A Unified Interface for Agentic Web Access

    Oct 9, 2026Sunghwan Kim, Deogyong Kim, Sangam Lee +2Web AgentsLLM Agent Harnesses

    Yonsei University