In a world increasingly driven by AI, applications are no longer just tools—they’re becoming platforms. Platforms that empower users, other apps, and now AI agents to collaborate seamlessly in ways we’re only beginning to understand.

At Stytch, we’ve been thinking deeply about what it means for an app to open itself up as an Identity Provider (IdP), enabling AI agents to act on behalf of users in a secure, permissioned, and programmatic way. This vision is embodied in our Connected Apps product, a powerful and easy way for any application to become its own IdP and unleash new possibilities, both agentic and non-agentic.

Supabase’s integration approach: A blueprint for modern apps

A perfect real-world example of an agentic use case being powered by an app acting as its own IdP is Supabase and its approach to integrations with popular AI tools like Lovable. The way Supabase, a powerful open-source Firebase competitor, enables permissioned access for both agentic and non-agentic workflows demonstrates exactly the kind of capability we’re excited to help every company build.

Because Supabase acts as their own IdP, it enables developers to build powerful integrations on top of the Supabase platform. By doing so, apps like Lovable (a popular AI coding agent that makes it easy to quickly prototype and build full-stack applications) can programmatically connect, access, and interact with Supabase data on behalf of users via their AI agent.

Supabase provides a simple and powerful framework for developers to build integrations. By using their OAuth2.0 supported authorization flow and management API, developers can:

• Allow end users to authenticate their Supabase account securely & with proper consent.
• Access user data via APIs.
• Take programmatic actions, such as reading or writing data, with permissioned scopes (e.g. update the RLS policies on my project).

This functionality lays the groundwork for AI agents like Lovable’s to access Supabase resources on behalf of users. Here is an example of Lovable using these permissions to ask me to confirm changes to the RLS (row level security) policies on my Supabase project for an example app I’m building:

By simply “applying changes”, Lovable is able to move beyond being simply a generative coding agent (i.e. it generates code that I use elsewhere) and actually able to become a full interactive coding agent by taking those suggested, but reviewable, actions on my behalf in my Supabase project.

Moving beyond the Supabase example, imagine an AI agent that could:

• Draft reports by querying project data in real-time.
• Update tasks or sync workflows based on user commands.
• Enhance user productivity by automating repetitive actions, all while ensuring security and control.

This is all made possible because Supabase can act as an IdP. The OAuth flow makes it developer-friendly, secure, and simple for any agentic or non-agentic app to leverage the full power of Supabase’s platform on behalf of their users.

With Connected Apps, we’re taking this concept even further.

Stytch Connected Apps: Supercharging the IdP model for AI agents

Connected Apps is Stytch’s answer to the growing need for applications to become their own IdPs. It allows any app to:

1. Expose secure APIs for programmatic access.
2. Manage fine-grained permissions with read/write scopes for users and AI agents.
3. Authenticate seamlessly with OAuth2.0 and OpenID Connect (OIDC) standards.
4. Track and audit actions taken by AI agents, providing transparency and accountability.

For example, a company like Vercel could use Connected Apps to allow external apps like Lovable, Devin.ai, and Bolt.new to have users connect their Vercel accounts, so that these tools can fully manage deploys on the user’s behalf.

With Connected Apps, any app—from CRMs to productivity tools—can achieve all this with best-in-class consent management and fine-grained scope/role authorization so that end users can feel secure in connecting AI agents to their other apps.

Connected Apps not only enhances your app’s utility but also positions it as an integral part of an AI-driven ecosystem. Companies adopting Connected Apps can seamlessly integrate with third-party platforms, empower AI agents, and ultimately provide greater value to their users.

The future of apps in 2025 and beyond

We believe that in 2025, it will be commonplace for apps to:

1. Act as IdPs: Every app will need to provide a way for users (and their AI agents) to securely authenticate and access data programmatically.
2. Support AI agents: AI will evolve beyond being reactive tools and become proactive collaborators. These agents will require robust permissioning and secure access to user data across multiple apps. Consent management is critical in this new world.
3. Enable seamless integrations: The app ecosystem will increasingly rely on interoperability, with APIs and integrations becoming table stakes for growth.

Connected Apps is our vision for making this future accessible to every company. Whether you’re building a niche productivity tool, a cutting-edge CRM, or an AI-powered analytics platform, we provide the infrastructure to make your app the foundation for the next generation of AI-driven workflows.

Why this matters

The AI revolution is here, but without the right infrastructure, its potential will remain unrealized. Apps that embrace their role as IdPs unlock unprecedented opportunities for innovation, growth, and user engagement. With Connected Apps, we’re making it easier than ever for companies to:

• Enable secure, permissioned AI workflows.
• Empower developers with simple integration capabilities.
• Deliver better, faster, and more valuable experiences for their users.

It’s not just about keeping up with the future—it’s about leading the way. If Supabase’s approach inspires you, imagine what your app could achieve with the added power of Stytch’s Connected Apps.

Ready to turn your app into an identity provider?

Explore Connected Apps today and check out the getting started guide to discover how your app can become the foundation of AI-driven workflows.

Let’s build the future together.