Art Direction Daily
No. 043 · The Agentic Line
Are the days of constantly authorizing your agents almost over?
A stable MCP extension lets an organization grant access once and have every approved agent inherit it, no per-app consent screen along the way. The week's other releases push the same direction: agents reaching past their own canvas to act on services they do not own.
Art Deco Travel Poster
The day's briefing as a grand-voyage travel poster: a symmetrical gold-hairline crest, stepped cartouche frames, and a sunburst standing over deep teal.
The travel posters of the 1920s and 30s sold a journey with symmetry, metallic linework, and a single monumental destination. Translated to the web, that becomes a centered reading column rather than a grid, a stepped cartouche around the title in place of a hero card, ticket-stub metadata where a dashboard would print stat tiles, and section headers drawn as numbered ports of call. Gold is the only metallic, kept for hairlines and marks so the cream body text stays the quiet, legible center.
Port Authority
One identity opens every connected agent
The Model Context Protocol's Enterprise-Managed Authorization extension is now stable. An organization sets the policy once in its identity provider, and a person signing in finds every approved MCP server already connected, with no per-app consent screen in between. Okta is the first identity provider, Anthropic wired the standard into Claude, Claude Code, and Cowork, and Asana, Atlassian, Canva, Figma, Linear, and Supabase already speak it on the server side.
The design agent goes to read the world
Figma's design agent can now search the live web from inside a file, pulling real references and real copy in place of gray placeholder text. It continues the outward turn that yesterday's issue traced through the Figma MCP server: the tool stops approximating the world and goes to fetch it.
The Crossing
CSS can now fire an animation on arrival
Chrome 146 is the first browser to ship scroll-triggered animations, a CSS pair that plays a fixed-duration keyframe animation the moment an element crosses a scroll threshold. Where scroll-driven animation ties progress to the scrollbar position, this behaves like an Intersection Observer written in plain CSS, with timeline-trigger naming the threshold and animation-trigger deciding whether the motion locks in once or reverses on the way back out. It is a real micro-interaction the platform now owns, which makes the guardrail more important, not less: pair it with a reduced-motion query and keep the movement small.
Papers In Order
Scoped tokens instead of a standing key
Vercel shipped Connect, which hands an agent a short-lived, scoped token for an outside service such as Slack or GitHub rather than a long-lived secret living in the environment. A GitHub token can be pinned to one repository and read-only, a connector runs in only the environments you attach it to, and one command revokes every token it ever issued.
A sandbox with a real database behind it
Simon Willison released Datasette Apps, self-contained HTML and JavaScript tools that run in a locked-down iframe over live data, reaching it through a narrow allow-listed query bridge. It reads like a Claude Artifact handed a persistent backend, and the security model is the point of interest: a content policy the page itself cannot rewrite, with write access limited to named stored queries a trusted operator approves in advance.
A credential is an itinerary now: it says where the agent may go, and for how long.
Prompt Lab
Design a single web page as an Art Deco travel poster presenting a short briefing of linked stories. Page archetype: a grand-voyage destination poster, symmetrical and centered, not a card grid or dashboard. Ground: deep teal (#0C2B2E) with slightly lighter teal panels (#0F373A). Text is warm cream (#F3E8CE). Gold (#D6B25E) is the only metallic and is reserved for hairline rules, frame corners, section numerals, and link underlines. Emerald (#2C8C70) is a decorative field and mark color only, never a surface behind small text. Layout: one centered reading column about 680px wide, no left-right split. Open with a small mono crest line, a thin gold rule with a tiny diamond, then the headline inside a stepped cartouche, a rectangular frame with an inset gold hairline and small bracket corners. Under the deck, place a ticket-stub metadata strip: three perforated cells (departure date, issue number, reading time) divided by dashed gold rules. Mark each section as a numbered port of call: a gold square holding a Roman numeral, flanked by thin gold wings, with the section name in spaced small caps. Type: display in a monumental engraved serif (Cinzel) for the headline, section numerals, and item titles; body in a transitional serif (Spectral) at 19px, line-height 1.7, measure near 68 characters, cream on teal, never colored body text; tiny labels in a mono (Space Mono) in uppercase with wide tracking. Use exactly one italic display pullquote. Include one generated plate as the poster image: a streamlined Deco scene (an ocean liner or stepped gateway under a radiating sunburst) in emerald, gold, and cream on teal, with no readable text inside the image. Add one restrained micro-interaction, a gold underline that brightens on link hover, behind a prefers-reduced-motion guard. Keep WCAG AA on every text color against its real background. No gradients, no glow, no neon, no pill-shaped everything, no fake search fields or toggles.
Works in: Beaver Builder AI, v0, Lovable, Cursor, Figma Make.
Every release here is one border crossing: an agent leaving its own canvas to act on a service it does not own. The newest design surface is the gate beside the screen, deciding who is really asking and how far they get to walk in.
Manifest
- Enterprise-Managed Authorization: Zero-touch OAuth for MCPblog.modelcontextprotocol.io
- Search the web in the Figma design agentfigma.com
- A First Look at Scroll-Triggered Animationscss-tricks.com
- Vercel Connect: Secure access to external services for your agentsvercel.com
- Datasette Apps: Host custom HTML applications inside Datasettesimonwillison.net
- AI agents are a confused deputy with the keys to your kingdomstackoverflow.blog