A crew that started has a subject. That is not an allow list. A tool the subject may not call still has to be refused after this hook, the way the trust-store sample refuses charge.
After the subject is known
| Check | Where |
|---|---|
| Bearer accepted | The hook on CrewAI |
| Allowed tools | Trust-store row, when your process enforces it |
| The action itself | Authorization using the subject |
Revoke in Agents stops new tokens when the subject is the OIDC client id. Tokens already issued last until expires_in unless a later check rejects them.
When the token is an RFC 8693 delegation, the person stays the subject and the agent stays the actor. Authorizing the agent as the user skips the delegation.
Related
| Read | To learn how to |
|---|---|
| Custom channel auth for CrewAI | Admit the caller |
| Enriching instructions for CrewAI | What the model is allowed to see |
| Authorization | Pick the check after the subject |