Decide which AI agents to allow to take action

import {
        createAgentBouncer,
        getRequiredOAuthScopes,
        isOAuthRequired,
        isOAuthScopeDenied,
      } from "@agentbouncer/sdk";
      
      const agentBouncer = createAgentBouncer({
        apiKey: process.env.AGENTBOUNCER_API_KEY!,
        publicOrigin:
          process.env.AGENTBOUNCER_PUBLIC_ORIGIN,
        validateContentDigest: true,
      });
      
      export async function POST(request: Request) {
        // Verify before reading the body.
        const verification =
          await agentBouncer.verify({
            request,
            expectedTag: "web-bot-auth",
            action: "tools:call",
            tool: "weather",
            forwardAuthorization: true,
          });
      
        if (!verification.allowed) {
          const oauthRequired =
            isOAuthRequired(verification);
      
          const scopeDenied =
            isOAuthScopeDenied(verification);
      
          return Response.json(
            {
              error: oauthRequired
                ? "oauth_required"
                : scopeDenied
                  ? "insufficient_scope"
                  : "agent_access_denied",
      
              requiredScopes: oauthRequired
                ? getRequiredOAuthScopes(verification)
                : undefined,
            },
            {
              status: oauthRequired ? 401 : 403,
              headers: {
                "Cache-Control": "no-store",
              },
            }
          );
        }
      
        const body = await request.json();
      
        return Response.json({
          ok: true,
          city: body.city,
          agent: verification.agent,
          user: verification.oauth,
        });
      }