We reviewed 30 of the most popular AI agent projects on GitHub (OpenClaw, AutoGen, CrewAI, LangGraph, MetaGPT, AutoGPT, etc.) across six authorization criteria: scoped permissions, per-agent identity, user consent, revocation, audit trails, and delegation control.

  Key findings:
  - 93% rely on unscoped API keys as the only auth mechanism
  - 0% have per-agent cryptographic identity
  - 97% have no user consent flow
  - 100% have no per-agent revocation

  We mapped the gaps to OWASP's Agentic Top 10 (ASI01, ASI03, ASI05, ASI09,
  ASI10) and documented real incidents from this year — 21k exposed OpenClaw
  instances, 492 MCP servers with zero auth, 1.5M leaked tokens in the
  Moltbook breach.

  Full report: https://grantex.dev/report/state-of-agent-security-2026