Whoever provided the authorization credentials to the agent is on the hook.