# Agent session chains that can't escalate

DevFeed: [Agent session chains that can't escalate](<https://devfeed.tech/articles/agent-session-chains-that-can-t-escalate-26792.md>)

Original publisher: [Read original article](<https://workos.com/blog/agent-session-chaining>)

Author: WorkOS

Published: 2026-09-15T00:00:00Z

Content type: article

Language: en

Sources: [WorkOS Blog](<https://devfeed.tech/sources/workos-blog.md>)

Topics: [Authorization](<https://devfeed.tech/topics/authorization.md>), [API](<https://devfeed.tech/topics/api.md>), [API keys](<https://devfeed.tech/topics/api-keys.md>), [systems](<https://devfeed.tech/topics/systems.md>)

Tags: [agent](<https://devfeed.tech/tags/agent.md>), [api](<https://devfeed.tech/tags/api.md>), [auth](<https://devfeed.tech/tags/auth.md>), [authorization](<https://devfeed.tech/tags/authorization.md>), [backend](<https://devfeed.tech/tags/backend.md>), [multi-agent](<https://devfeed.tech/tags/multi-agent.md>), [multi-agent-systems](<https://devfeed.tech/tags/multi-agent-systems.md>), [permission](<https://devfeed.tech/tags/permission.md>), [server](<https://devfeed.tech/tags/server.md>), [systems](<https://devfeed.tech/tags/systems.md>)

## AI overview

The article explains how Agent Auth session chaining lets an agent create separately scoped child sessions for subtasks. Each child records its parent, uses its own access and single-use refresh tokens, can be revoked independently, and cannot outlive the root session. The supplied text also states that the backend creates the chain server-side using an API key.

## Source excerpt

An agent can open a child session of itself for a sub-task. The chain re-derives authority at every hop and can never outlive its root.