A crew that started has a subject. That is not an allow list. A tool the subject may not call still has to be refused after this hook, the way the trust-store sample refuses `charge`.

## After the subject is known

| Check | Where |
| --- | --- |
| Bearer accepted | The hook on [CrewAI](/docs/agent-frameworks/crewai) |
| Allowed tools | Trust-store row, when your process enforces it |
| The action itself | [Authorization](/docs/concepts/authorization) using the subject |

Revoke in [Agents](/docs/console/agents) stops new tokens when the subject is the OIDC client id. Tokens already issued last until `expires_in` unless a later check rejects them.

When the token is an [RFC 8693 delegation](/guides/agent-delegation), the person stays the subject and the agent stays the actor. Authorizing the agent as the user skips the delegation.

## Related

| Read | To learn how to |
| --- | --- |
| [Custom channel auth for CrewAI](/docs/ai/crewai/channel-auth) | Admit the caller |
| [Enriching instructions for CrewAI](/docs/ai/crewai/enriching-instructions) | What the model is allowed to see |
| [Authorization](/docs/concepts/authorization) | Pick the check after the subject |