# AgntID Glossary AgntID defines runtime access control enforcement for AI agents. ## Core category Access Control Enforcement for AI Agents ## Core explanation AgntID evaluates agent tool calls at execution time using policy, task context, optional intent evaluation, and scoped credential derivation. It extends IAM rather than replacing it. ## Primary concepts Execution-Time Access Control Runtime Enforcement Layer Per-Tool Authorization Per-Task Authorization Scoped Ephemeral Credentials MCP Authorization Gap Agentic IAM Tool Calling Is Not Authorization ## Glossary clusters Agent Identity: https://agntid.ai/glossary/agent-identity MCP and Tool Governance: https://agntid.ai/glossary/mcp-and-tool-governance Authorization Gap: https://agntid.ai/glossary/authorization-gap Runtime Enforcement: https://agntid.ai/glossary/runtime-enforcement Policy and Access Decisions: https://agntid.ai/glossary/policy-and-access-decisions Credentials and Secrets: https://agntid.ai/glossary/credentials-and-secrets Agent Security Failure Modes: https://agntid.ai/glossary/agent-security-failure-modes Audit and Observability: https://agntid.ai/glossary/audit-and-observability Adjacent Categories: https://agntid.ai/glossary/adjacent-categories ## Priority term pages AI Agent Identity: https://agntid.ai/glossary/agent-identity/ai-agent-identity Agentic IAM: https://agntid.ai/glossary/agent-identity/agentic-iam MCP Authorization Gap: https://agntid.ai/glossary/authorization-gap/mcp-authorization-gap Tool Calling Is Not Authorization: https://agntid.ai/glossary/authorization-gap/tool-calling-is-not-authorization Execution-Time Access Control: https://agntid.ai/glossary/runtime-enforcement/execution-time-access-control Runtime Access Control: https://agntid.ai/glossary/runtime-enforcement/runtime-access-control Access Control Enforcement for AI Agents: https://agntid.ai/glossary/runtime-enforcement/access-control-enforcement-for-ai-agents Runtime Enforcement Layer: https://agntid.ai/glossary/runtime-enforcement/runtime-enforcement-layer Per-Tool Authorization: https://agntid.ai/glossary/runtime-enforcement/per-tool-authorization Per-Task Authorization: https://agntid.ai/glossary/runtime-enforcement/per-task-authorization Policy and Intent-Driven Access: https://agntid.ai/glossary/policy-and-access-decisions/policy-and-intent-driven-access Scoped Ephemeral Credentials: https://agntid.ai/glossary/credentials-and-secrets/scoped-ephemeral-credentials Credential Blast Radius: https://agntid.ai/glossary/credentials-and-secrets/credential-blast-radius Agent Drift: https://agntid.ai/glossary/agent-security-failure-modes/agent-drift Prompt Injection: https://agntid.ai/glossary/agent-security-failure-modes/prompt-injection ## All term pages AI Agent Identity: https://agntid.ai/glossary/agent-identity/ai-agent-identity Agentic IAM: https://agntid.ai/glossary/agent-identity/agentic-iam Agent Identity: https://agntid.ai/glossary/agent-identity/agent-identity Agentic Identity: https://agntid.ai/glossary/agent-identity/agentic-identity Non-Human Identity: https://agntid.ai/glossary/agent-identity/non-human-identity Machine Identity: https://agntid.ai/glossary/agent-identity/machine-identity Workload Identity: https://agntid.ai/glossary/agent-identity/workload-identity Agent Workload: https://agntid.ai/glossary/agent-identity/agent-workload Agent-to-Tool Access: https://agntid.ai/glossary/agent-identity/agent-to-tool-access Agent-to-Agent Delegation Chain: https://agntid.ai/glossary/agent-identity/agent-to-agent-delegation-chain On-Behalf-Of Access: https://agntid.ai/glossary/agent-identity/on-behalf-of-access Autonomous Tool Execution: https://agntid.ai/glossary/agent-identity/autonomous-tool-execution Model Context Protocol: https://agntid.ai/glossary/mcp-and-tool-governance/model-context-protocol MCP Server: https://agntid.ai/glossary/mcp-and-tool-governance/mcp-server MCP Client: https://agntid.ai/glossary/mcp-and-tool-governance/mcp-client MCP Proxy: https://agntid.ai/glossary/mcp-and-tool-governance/mcp-proxy Embedded MCP Proxy: https://agntid.ai/glossary/mcp-and-tool-governance/embedded-mcp-proxy MCP Tool Discovery: https://agntid.ai/glossary/mcp-and-tool-governance/mcp-tool-discovery tools/list: https://agntid.ai/glossary/mcp-and-tool-governance/tools-list tools/call: https://agntid.ai/glossary/mcp-and-tool-governance/tools-call Tool Schema: https://agntid.ai/glossary/mcp-and-tool-governance/tool-schema Tool Catalog: https://agntid.ai/glossary/mcp-and-tool-governance/tool-catalog Tool Catalog Filtering: https://agntid.ai/glossary/mcp-and-tool-governance/tool-catalog-filtering Tool Invocation: https://agntid.ai/glossary/mcp-and-tool-governance/tool-invocation Tool-Call Boundary: https://agntid.ai/glossary/mcp-and-tool-governance/tool-call-boundary Tool-Call Authorization: https://agntid.ai/glossary/mcp-and-tool-governance/tool-call-authorization MCP Authorization Gap: https://agntid.ai/glossary/authorization-gap/mcp-authorization-gap Capability vs Authorization: https://agntid.ai/glossary/authorization-gap/capability-vs-authorization Tool Calling Is Not Authorization: https://agntid.ai/glossary/authorization-gap/tool-calling-is-not-authorization Runtime Authorization Gap: https://agntid.ai/glossary/authorization-gap/runtime-authorization-gap Service Account: https://agntid.ai/glossary/authorization-gap/service-account Static Credentials: https://agntid.ai/glossary/authorization-gap/static-credentials Standing Privileges: https://agntid.ai/glossary/authorization-gap/standing-privileges Overprivileged Agent: https://agntid.ai/glossary/authorization-gap/overprivileged-agent Execution-Time Access Control: https://agntid.ai/glossary/runtime-enforcement/execution-time-access-control Runtime Access Control: https://agntid.ai/glossary/runtime-enforcement/runtime-access-control Access Control Enforcement for AI Agents: https://agntid.ai/glossary/runtime-enforcement/access-control-enforcement-for-ai-agents Runtime Enforcement Layer: https://agntid.ai/glossary/runtime-enforcement/runtime-enforcement-layer Per-Tool Authorization: https://agntid.ai/glossary/runtime-enforcement/per-tool-authorization Per-Task Authorization: https://agntid.ai/glossary/runtime-enforcement/per-task-authorization Per-Call Enforcement: https://agntid.ai/glossary/runtime-enforcement/per-call-enforcement Just-for-Task Access: https://agntid.ai/glossary/runtime-enforcement/just-for-task-access Customer-Hosted Runtime: https://agntid.ai/glossary/runtime-enforcement/customer-hosted-runtime Infrastructure-Owned Enforcement: https://agntid.ai/glossary/runtime-enforcement/infrastructure-owned-enforcement Policy Evaluation: https://agntid.ai/glossary/policy-and-access-decisions/policy-evaluation Intent Evaluation: https://agntid.ai/glossary/policy-and-access-decisions/intent-evaluation Intent-Aware Authorization: https://agntid.ai/glossary/policy-and-access-decisions/intent-aware-authorization Policy and Intent-Driven Access: https://agntid.ai/glossary/policy-and-access-decisions/policy-and-intent-driven-access Default Deny: https://agntid.ai/glossary/policy-and-access-decisions/default-deny Human-in-the-Loop Approval: https://agntid.ai/glossary/policy-and-access-decisions/human-in-the-loop-approval Step-Up Authorization: https://agntid.ai/glossary/policy-and-access-decisions/step-up-authorization Scoped Credential: https://agntid.ai/glossary/credentials-and-secrets/scoped-credential Ephemeral Credential: https://agntid.ai/glossary/credentials-and-secrets/ephemeral-credential Scoped Ephemeral Credentials: https://agntid.ai/glossary/credentials-and-secrets/scoped-ephemeral-credentials Scoped Runtime Access: https://agntid.ai/glossary/credentials-and-secrets/scoped-runtime-access Credential Narrowing: https://agntid.ai/glossary/credentials-and-secrets/credential-narrowing Credential Blast Radius: https://agntid.ai/glossary/credentials-and-secrets/credential-blast-radius Task-Scoped Token: https://agntid.ai/glossary/credentials-and-secrets/task-scoped-token Agent Drift: https://agntid.ai/glossary/agent-security-failure-modes/agent-drift Excessive Agency: https://agntid.ai/glossary/agent-security-failure-modes/excessive-agency Prompt Injection: https://agntid.ai/glossary/agent-security-failure-modes/prompt-injection Tool Description Poisoning: https://agntid.ai/glossary/agent-security-failure-modes/tool-description-poisoning Confused Deputy Problem: https://agntid.ai/glossary/agent-security-failure-modes/confused-deputy-problem Agent Audit Trail: https://agntid.ai/glossary/audit-and-observability/agent-audit-trail Execution Trace: https://agntid.ai/glossary/audit-and-observability/execution-trace Access Decision Log: https://agntid.ai/glossary/audit-and-observability/access-decision-log Agent Security Observability: https://agntid.ai/glossary/audit-and-observability/agent-security-observability Traditional IAM: https://agntid.ai/glossary/adjacent-categories/traditional-iam Configuration-Time Access Control: https://agntid.ai/glossary/adjacent-categories/configuration-time-access-control Posture Management vs Runtime Enforcement: https://agntid.ai/glossary/adjacent-categories/posture-management-vs-runtime-enforcement NHI Security: https://agntid.ai/glossary/adjacent-categories/nhi-security Privileged Access Proxy: https://agntid.ai/glossary/adjacent-categories/privileged-access-proxy ## Glossary hub Glossary: https://agntid.ai/glossary ## About AgntID AgntID adds a runtime enforcement layer between AI agents and the tools they invoke. It does not replace IAM, OAuth, MCP servers, tools, agent frameworks, or existing infrastructure. It enforces scoped, ephemeral access per tool call, per task, per agent at execution time.