# Practical and Useful Patterns with ADK 🔐 API Keys, Bearer Tokens, OAuth2, OpenID Connect, Service Accounts — ADK's Authentication seamlessly integrates any auth scheme into your tools. 📌 Title: Authentication — Tool Auth Integration 🔗 URL: 🧩 Overview ADK's Authentication consists of two components: AuthScheme and AuthCredential. It supports APIKey, HTTP Bearer, OAuth2, OpenID Connect, and SERVICE_ACCOUNT authentication methods, providing unified auth management across tools. OAuth2 supports browser flows, and `tool_context.state` enables token caching and expiry handling. 🛠 Usage Configuration examples for each authentication method. Import `AuthScheme`, `AuthCredential`, `APIKeyAuth`, `HTTPBearerAuth`, and `OAuth2Auth` from `google.adk.auth`. For API Key authentication, create `APIKeyAuth(header_name="X-API-Key")` as the scheme and `AuthCredential(api_key="sk-your-api-key")` as the credential. For HTTP Bearer authentication, use `HTTPBearerAuth()` with `AuthCredential(token="your-bearer-token")`. For OAuth2 (browser flow), define the scheme with `OAuth2Auth(authorization_url="", token_url="", scopes=["read", "write"])` and provide `AuthCredential(client_id="your-client-id", client_secret="your-client-secret")`. Using authentication in tools: For using authentication in tools, define `call_protected_api(endpoint: str, tool_context: ToolContext)`. Retrieve cached tokens via `tool_context.state.get("user:api_token")` and reuse them if not expired. When expired, call `refresh_token(tool_context)` for a new token and store it back in `tool_context.state["user:api_token"]` for caching. Use the token in an `Authorization: Bearer` header when making API requests. 🏗 Practical Patterns **Token Caching Strategy**: Use the `user:` prefix in `tool_context.state` to cache tokens within a user's session, avoiding redundant token fetches. Always implement expiry management. For token caching, define `get_or_refresh_token(tool_context: ToolContext) -> str`. Retrieve token data from `tool_context.state.get("user:oauth_token")` and check the `expires_at` field with a 60-second buffer. If the token is still valid, return the `access_token` directly. Otherwise, call `oauth_client.refresh(refresh_token=...)` to obtain a new token and store it in `tool_context.state["user:oauth_token"]` as a dictionary containing `access_token`, `refresh_token`, and `expires_at`. **Service Account Authentication**: For GCP service-to-service communication, SERVICE_ACCOUNT auth enables secure API calls without user intervention. **Multi-Layer Auth**: When using different auth methods within the same agent, configure auth per tool. Combining with OpenAPIToolset's `auth_scheme`/`auth_credential` is particularly effective. 💡 Use Cases 🔑 Third-party API authentication with API keys 🌐 User-delegated API operations via OAuth2 🏗️ GCP inter-service communication with service accounts 🔄 Token caching and automatic refresh ⚠️ Caveats - Never hardcode credentials (API keys, secrets). Retrieve from environment variables or Secret Manager. - OAuth2 browser flows don't work in server-side batch processing. Consider service accounts or client credentials flow instead. - Neglecting token expiry management leads to 401 errors from expired tokens. Implement automatic refresh with a time buffer. ✨ With properly configured ADK authentication, you can seamlessly embed secure API integration into your tools. Authentication is the foundation of agent trustworthiness! #ADK# #AIAgent#

i expect culture and collective belief to become increasingly valuable as AI continues to scale if quantum risk becomes a serious concern for Bitcoin, i can see a path where Zcash attracts a much larger valuation through its privacy and store-of-value thesis i also think Murad's broader thesis is directionally correct, even if a pure memecoin flipping Bitcoin seems extremely unlikely in a world where AI commoditizes intelligence, attention, culture and assets people genuinely believe in could command an enormous premium

Ever wondered how physical coin flips and dice rolls become a Bitcoin BIP39 mnemonic? Explore entropy, 11-bit word indexes, checksum generation, and the possible final words, step by step. ⚠️ Educational use only. Never use an online-generated seed to receive real funds. For real wallets, work offline in a secure environment, and store physical backups of your seed phrase and passphrase separately. Try it here:

The operations in weight loading can vary a LOT across models and layers. To support these, we use a “recording tensor” dry run - we use a dummy tensor to record the various transformations in the `load_weights` function, and store the op chain at init time. We replay the op chain on the trainer side to compute the full weights during each weight sync.

Apple officially announced new commercial terms for EU apps. CTF is cancelled and replaced with a 5% Core Technology Commission. Initial Acquisition Fee and Store Services Fee are also dropped. Apps can now offer Apple IAP and other payment methods at the same time. Takes effect October 1, 2026. 👉

Faced with software you've never used, you start by poking around and learning what happens 🧭 Until now, an agent meeting a new environment had to collect more data and retrain. That is costly, and a poor fit for private, ever-changing environments like internal tools. RSIAgent: Autonomous Exploration for Recursive Self-improvement in New Environments takes a training-free route. Three roles, a curriculum agent that picks what to explore, an actor that executes and grows memory, and a verifier that judges outcomes, find causal relations between actions and results inside the environment and store them in memory. It first explores broadly, then digs deep into hard boundary conditions, and finally freezes the memory for testing. On OSWorld 2.0, partial score rose from 71.97 to 78.98 and binary accuracy from 37.80 to 42.68. On a game development benchmark, overall quality went from 52.77 to 61.28. The authors also admit that accepted mistakes can become permanent rules, and that test-time compute is high. Raising performance with only memory from exploration, with no parameter updates, seems worth trying in production. #AIAgents# #SelfImprovement#

🇺🇸 An e-bike battery burned down a family's home in Oregon in SECONDS, and it wasn't even charging. The bike was a Christmas gift for the homeowner's 15-year-old son, and the manual said to charge and store it inside. Everyone made it out, but they lost nearly everything, including their cat, Pax. If one of these is sitting in your living room right now, maybe give it a second look. Writer: Julie

Europe doesn't have an energy shortage. It has a coordination problem. Millions of homes generate and store power that mostly sits idle. We're proud to lead @nomosenergy's €20M round – backing the team building the operating system for Europe's energy transition, one home at a time.