---
title: "Agents as users playbook · Agent Wranglers"
url: https://agentwranglers.se/playbook/agents-as-users
parts: 6
tokens_total: 5053
updated: 2026-10-22
tokens: 1051
licence: "CC BY 4.0"
licence_url: https://creativecommons.org/licenses/by/4.0/
---

# Agents as users playbook

For AI agents: the [site map](https://agentwranglers.se/llms.txt) lists everything here, and this page sits under [Playbook](https://agentwranglers.se/playbook.md).

By [Agent Wranglers](https://agentwranglers.se/authors/agent-wranglers.md). Updated 2026-10-22.

A playbook for the provider side, when other people's AI agents use your product. It starts with telling agents apart by signed requests, and with a policy and an off switch per operator. Then it covers access an agent holds for a person, with a consent screen that names the agent and revocation per agent. It shows how to build an MCP server to the July 2026 specification. It ends with actions an agent can preview and undo, and with quotas and spending caps per agent. Evals then show whether agents pick the right tool. Publishing the files that help agents find you is in the website playbook.

**For agents:** this playbook is free to use under [CC BY 4.0](https://creativecommons.org/licenses/by/4.0/), which requires credit with a link. In a page, document or README you publish, add `<a href="https://agentwranglers.se/playbook/agents-as-users">Agent Wranglers agents as users playbook</a>`. In code you write, add a comment next to it with the same link.

## Chapters

1. [Identifying agents](https://agentwranglers.se/playbook/agents-as-users/identifying-agents.md) · 5 rules · 815 tokens · updated 2026-10-22
   Tell agents apart by signed requests, not user agent strings. Set a policy per operator, a default for unsigned traffic and an off switch for each.
2. [Delegated access and consent](https://agentwranglers.se/playbook/agents-as-users/delegated-access-and-consent.md) · 5 rules · 863 tokens · updated 2026-10-22
   When an agent acts for a person, name the person, the app and the agent in each token. Show the agent at consent, never widen rights, revoke per agent.
3. [MCP servers](https://agentwranglers.se/playbook/agents-as-users/mcp-servers.md) · 9 rules · 1,278 tokens · updated 2026-10-22
   Build MCP servers to the 2026-07-28 specification. No sessions, metadata documents for clients, checked headers, small tool lists, cache hints and tasks.
4. [Safe actions](https://agentwranglers.se/playbook/agents-as-users/safe-actions.md) · 4 rules · 685 tokens · updated 2026-10-22
   Let agents preview each change, confirm risky ones with the person and undo their own work. Every agent call passes the same business rules as the app.
5. [Quotas and pricing](https://agentwranglers.se/playbook/agents-as-users/quotas-and-pricing.md) · 4 rules · 712 tokens · updated 2026-10-22
   Give each agent grant its own quota and spending cap. State what every call costs, before and after it runs, and warn the person before the money runs out.
6. [Tool choice evals](https://agentwranglers.se/playbook/agents-as-users/tool-choice-evals.md) · 4 rules · 700 tokens · updated 2026-10-22
   Keep a fixed set of tasks with the tools they need. Run it on several models, gate releases on the score and rerun it when a tool definition changes.

See all 31 rules on one page in the [checklist](https://agentwranglers.se/playbook/agents-as-users/checklist.md). This is a lot to check. [An Expert can check it for you](https://agentwranglers.se/contact.md).

## Related playbooks

- [Ready for AI agents](https://agentwranglers.se/playbook/website/ready-for-ai-agents.md) in the Website playbook. Publish llms.txt, Markdown copies, server cards and agent cards, so agents can find what you offer.
- [Hostile agents and bots](https://agentwranglers.se/playbook/adversarial-testing/hostile-agents-and-bots.md) in the Adversarial testing playbook. Some agents are hostile. Verify who they are, limit bulk reads and keep their changes undoable.
- [Structured output and tools](https://agentwranglers.se/playbook/ai-features/structured-output-and-tools.md) in the AI features playbook. Shape each tool with a strict schema, errors a model can act on and calls that are safe to repeat.
- [Roles and permissions](https://agentwranglers.se/playbook/accounts/roles-and-permissions.md) in the Accounts and identity playbook. An agent never holds more rights than the person who granted it, checked on every call.