AgntID Blog

Sort by:
Top AI Agent Identity Management and IAM Platforms in 2026
ConceptualSeptember 9, 2026

Top AI Agent Identity Management and IAM Platforms in 2026

Compare 10 AI agent identity management and IAM platforms for identity, governance, non-human identity security, credentials, delegated access, and runtime authorization.

SH
Sachin HHead of Marketing
Runtime Access Control for AI Agents: Why Permissions Need to Be Enforced at Execution Time
ConceptualSeptember 6, 2026

Runtime Access Control for AI Agents: Why Permissions Need to Be Enforced at Execution Time

Runtime access control for AI agents determines whether a specific agent action should be allowed when the action is attempted and before it executes.

SH
Sachin HHead of Marketing
Least Privilege for AI Agents: How to Enforce It in Production
ConceptualSeptember 5, 2026

Least Privilege for AI Agents: How to Enforce It in Production

A practical security playbook for controlling agent identities, tools, actions, resources, delegated access, and runtime authorization.

SH
Sachin HHead of Marketing
AI Agent Permissions: How Enterprises Can Control What Agents Access and Do
ConceptualSeptember 4, 2026

AI Agent Permissions: How Enterprises Can Control What Agents Access and Do

AI agents are moving from controlled pilots into real enterprise workflows. As they begin accessing tools, data, APIs, and business systems, permissions become core enterprise control.

SH
Sachin HHead of Marketing
AI Agent Authorization: How to Control What Agents Can Do
ConceptualSeptember 3, 2026

AI Agent Authorization: How to Control What Agents Can Do

How to manage agent permissions, apply least privilege, and control tool and API actions at runtime.

SH
Sachin HHead of Marketing
MCP Security Best Practices for Production Deployments
ConceptualSeptember 2, 2026

MCP Security Best Practices for Production Deployments

MCP ships no mandatory security. Here's the practitioner checklist: OAuth 2.1 + PKCE, per-tool authorization, vault-injected credentials, tool call validation, and tamper-evident audit logs.

SK
Sundar KrishFounder and CEO
MCP Gateway vs Embedded Proxy: Where Should Tool-Call Enforcement Run?
ConceptualSeptember 1, 2026

MCP Gateway vs Embedded Proxy: Where Should Tool-Call Enforcement Run?

MCP has two deployment models: local STDIO and remote gateways. Neither enforces policy at the tool-call level inside your trust boundary. Here's the architecture that does.

SK
Sundar KrishFounder and CEO
Why Multi-Step Drift Isn't Required for Runtime Risk
TechnicalJuly 16, 2026

Why Multi-Step Drift Isn't Required for Runtime Risk

We attempted to induce multi-step MCP agent drift across monitoring and AWS tools. The experiment didn't produce reliable chains—but it revealed why the very first unexpected tool call is already a runtime security decision.

SK
Sundar KrishFounder and CEO
Four Ways AI Agents Mishandle Credentials Today, and Why Each Creates an Unexpectedly Broad Blast Radius
ConceptualJune 22, 2026

Four Ways AI Agents Mishandle Credentials Today, and Why Each Creates an Unexpectedly Broad Blast Radius

AI agents inherit credential patterns built for humans and static workloads. Each anti-pattern looks manageable in isolation. Together, they create a blast radius that covers everything the credential can touch.

SK
Sundar KrishFounder and CEO
Tracing Access from Human Intent to Tool Execution: Why Every AI Agent Tool Call Needs a Complete Delegation Chain Record
ConceptualMay 29, 2026

Tracing Access from Human Intent to Tool Execution: Why Every AI Agent Tool Call Needs a Complete Delegation Chain Record

Every AI agent tool call is the end of a chain — from human intent through agent reasoning to execution. Without a record of how authority traveled that chain, authorized and unauthorized look identical after the fact.

SK
Sundar KrishFounder and CEO
Observability for AI Agents Starts Inside the Enforcement Layer, Not Outside It
ConceptualMay 28, 2026

Observability for AI Agents Starts Inside the Enforcement Layer, Not Outside It

Standard monitoring tools capture what your agents did — not whether they were allowed to do it. Here's why security observability for AI agents must start inside the enforcement layer.

SK
Sundar KrishFounder and CEO
I Told the Orchestrator 'Do Not Modify.' 7 of 12 Sub-agents Never Heard It.
TechnicalMay 26, 2026

I Told the Orchestrator 'Do Not Modify.' 7 of 12 Sub-agents Never Heard It.

What 36 controlled runs of Claude Code's Agent primitive reveal about delegation: the user's no-modify constraint disappears at the sub-agent boundary 7 times in 12, and the sub-agent that doesn't hear it inherits 41 GitHub tools plus Bash, Edit, and Write.

SK
Sundar KrishFounder and CEO
MCP's Missing Authorization Layer: Why Tool Discovery and Access Control Are Not the Same Thing
ConceptualMay 13, 2026

MCP's Missing Authorization Layer: Why Tool Discovery and Access Control Are Not the Same Thing

MCP handles tool discovery — not what happens when an agent calls one. The authorization gap that OAuth doesn't close requires enforcement at execution time.

SK
Sundar KrishFounder and CEO
AI Agents Are Not Your Average Identity: Here's Why They Need Their Own System
ConceptualMay 7, 2026

AI Agents Are Not Your Average Identity: Here's Why They Need Their Own System

AI agents are not service accounts or bots. They're a third identity category: non-deterministic, autonomous, and built to chain tools at machine speed. Here's what that means for IAM.

SK
Sundar KrishFounder and CEO
Why AI Agent Access Control Must Happen at Execution Time, Not at Configuration Time
ConceptualMay 1, 2026

Why AI Agent Access Control Must Happen at Execution Time, Not at Configuration Time

Static permissions assigned to AI agents at configuration time leave gaps at every tool call. This article explains why runtime access control with scoped, ephemeral credentials is essential for AI agents.

SK
Sundar KrishFounder and CEO
I Gave My LangChain Agent Three Tools. All Three Had Access to Every Secret in the Process.
TechnicalApril 30, 2026

I Gave My LangChain Agent Three Tools. All Three Had Access to Every Secret in the Process.

A real LangChain setup showed how Slack, SQL, and web search tools can all access the same shared secrets when there is no runtime isolation.

SK
Sundar KrishFounder and CEO
How a Tool Description Poisoning Attack Sent My Agent Out of Scope
TechnicalApril 29, 2026

How a Tool Description Poisoning Attack Sent My Agent Out of Scope

How one poisoned tool description pushed an agent out of scope and into AWS

SK
Sundar KrishFounder and CEO
Why Traditional IAM Fails When an AI Agent Calls a Tool
ConceptualApril 20, 2026

Why Traditional IAM Fails When an AI Agent Calls a Tool

AI agents violate every assumption traditional IAM was built on. This article examines four specific failures at the tool-call layer — and what runtime enforcement needs to look like when agents act at machine speed.

SK
Sundar KrishFounder and CEO
GitHub MCP Gave My Agent 41 Tools. A 3-Word Prompt Made It Use the Wrong Ones.
TechnicalApril 15, 2026

GitHub MCP Gave My Agent 41 Tools. A 3-Word Prompt Made It Use the Wrong Ones.

How vague prompts turn read-only tasks into write attempts — and why static token scoping isn't enough to stop it.

SK
Sundar KrishFounder and CEO
My Agent Finished Its Job, Then Started another one out-of-scope
TechnicalApril 9, 2026

My Agent Finished Its Job, Then Started another one out-of-scope

How a simple monitoring task drifted into AWS infrastructure

SK
Sundar KrishFounder and CEO