Delegated login
The agent gets in with a login link to the user's email, a trusted-device status, or a scoped token, and the user does not type a code into a chat.
What people report
Instinct logged in via emailed link and filled the cart. Muse needed a verification code, a CAPTCHA blocked it, and it gave the task back.
@chandnirao_here on X, about Uber Eats
I have it log in through my gmail account.. we do the gmail code.. then we mark it as a reliable option so we don’t blocked out
How to do it
- Accept a login link by email. Agents with an email inbox (Instinct) can use it; agents without one fall back to the person.
- Let the user mark a device as trusted for 30 days.
- Offer a scoped token or OAuth for the actions an agent needs. Read-only by default.