Category 1 of 12 · Controls: Who the agent is

Agent identity and credentials

Tools that give each AI agent its own registered identity, owner, and short-lived credentials, instead of letting it run on a shared service account or a static API key.

Mitigates: ASI03 Identity and Privilege Abuse, ASI10 Rogue Agents, LLM06 Excessive Agency · MITRE ATLAS AML.T0053

Vendors, by signal score

• #1
  SailPointPlatform suite

  SailPoint Agentic Fabric inventories AI agents and machine identities, ties each agent to a human owner through its lifecycle, applies real-time authorization, and disables rogue agents and revokes their credentials. The Entro Security acquisition extends it to non-human identity discovery.

  74
• #2
  Microsoft

  Microsoft Entra Agent ID registers AI agents as directory identities with sponsors and lifecycle governance, and extends OAuth flows, Conditional Access, and sign-in logs to them.

  70
• #3
  Teleport

  Infrastructure identity platform whose Agentic Identity Framework gives agents a cryptographic workload identity with short-lived certificates, MCP access control, and audit of agent actions.

  56
• #4
  Aembit

  Workload and agent IAM: verifies an agent's identity, binds it to the user it acts for, and issues just-in-time, short-lived credentials under access policy, including through an MCP Identity Gateway.

  50
• #5
  Keycard

  Identity and access for AI agents: gives each agent its own identity and issues short-lived, per-request credentials scoped to the user and task, with policy checks and an audit log.

  44
• #6
  Oasis SecurityAcquired by Cyera

  Non-human identity management and Agentic Access Management: provisions ephemeral, per-session identities for agents and records prompt, intent, policy, and action for each session. Acquired by Cyera, now sold as Cyera Identity.

  43
• #7
  Permiso SecurityAcquired by Okta

  Identity threat detection and response across human, machine, and AI agent identities, attributing each agent run, tool call, and data access to an identity. Acquired by Okta in 2026.

  37
• #8
  Astrix SecurityAcquired by Cisco

  Non-human identity and AI agent security: inventories agents, MCP servers, and secrets, assigns human owners, and issues short-lived, just-in-time access. Acquired by Cisco in 2026.

  30
• #9
  Token Security

  Identity security for AI agents and non-human identities: discovers agents and MCP servers, assigns human owners, right-sizes permissions by intended purpose, and retires unused agents.

  29
• #10
  Entro SecurityAcquired by SailPoint

  Non-human identity and secrets security: discovers AI agents, MCP servers, and secrets, maps each to a human owner, and detects anomalous use. Acquired by SailPoint in 2026.

  16
• #11
  NatomaAcquired by Snowflake

  Managed MCP platform that connects AI clients to business applications through per-user connections, with per-tool access policies and a log of every tool call. Acquired by Snowflake in 2026.

  12

Ranked within this category only. How the score works.

Also covers this category

• CiscoPlatform suite

  Cisco AI Defense, which incorporates the Robust Intelligence acquisition, adds agent red teaming, runtime guardrails, and MCP server scanning; Duo registers agents as identities with human owners, and Secure Access enforces MCP policy. Cisco also acquired the NHI vendor Astrix Security.

  60
• Descope

  Customer and agentic identity platform whose Agentic Identity Hub registers agents and MCP servers, stores third-party tokens in a vault, and supports Cross App Access (ID-JAG).

  59
• Okta

  Workforce identity provider whose Okta for AI Agents registers agents in Universal Directory with human owners, and whose Agent SSO brings Cross App Access to agent connections.

  75
• Runlayer

  MCP gateway and agent platform: gives each agent its own account, issues on-behalf-of tokens that carry both the user and the agent, enforces per-tool policy, and exports every tool call to a SIEM.

  50

Questions to ask a vendor

1. Is each agent a first-class identity with a named human owner and a lifecycle?
2. Are credentials short lived and minted just in time, or stored as static secrets?
3. Can you revoke every credential one agent holds in a single action?

Go deeper

• Identity for AI agents (guide)
• Authentication for AI agents
• NHI security shortlist

FAQ

How is agent identity different from non-human identity?

Non-human identity covers every machine credential: service accounts, API keys, certificates. Agent identity is the subset that acts autonomously and on behalf of people, so it also needs an owner, a delegation record, and a way to stop it mid-task.

Why not reuse a service account for an agent?

A shared service account cannot tell which agent or which user caused an action, usually carries standing privilege, and survives the agent's retirement. That is the Identity and Privilege Abuse risk (ASI03) in the OWASP agentic list.