A product/company qualifies if it provides infrastructure or a platform that lets developers give an AI agent secure, scoped, delegated access to external tools/APIs on behalf of a user or organization -- via OAuth/OIDC token issuance, encrypted credential/token vaulting, delegated-consent flows, and/or runtime authorization decisions for agent tool-calls (including MCP-server auth) -- offered as a distinct product or platform capability a builder can adopt today.