Agentic Identity IndexBest for mcp gateway and tool control
Enforcement on MCP server access and individual tool calls.
Aembit, Keycard, NewCore and Idira 9.0 joint
Agent discovery 6.0 / Per-action policy 8.5 / Agent credentials 9.0
Watch out: A human approval step was not verified in the documentation reviewed.
All 11 platforms are ranked on this criterion alone. A capability lead does not imply a lead on every buyer situation.
| Rank | Platform | Type / best for | Score | Evidence |
|---|---|---|---|---|
| 1= | Aembit | Agent and workload identity brokerMCP Authorization Server and Identity Gateway are documented as available. | 9.0 | Review Docs |
| 2= | Keycard | Agent access infrastructureThe gateway aggregates MCP servers and applies policy to individual tool calls. | 9.0 | Review Docs |
| 3= | NewCore | Agent governance layerAgent Guardian describes MCP gateway enforcement over agent tool access. Connector coverage needs a trial. | 9.0 | Review Docs |
| 4= | Idira | Agent identity brokerMCP proxy architecture and tool access controls are documented. Connection mode is fixed at registration. | 9.0 | Review Docs |
| 5= | Descope | Agent authentication and access hubMCP documentation covers OAuth authorisation, client registration and consent. | 8.5 | Review Docs |
| 6= | Teleport | Infrastructure and MCP accessMCP enrollment, proxying and identity-based access control are documented. | 8.5 | Review Docs |
| 7= | Astrix | Agent discovery and provisioningMCP inventory is documented. Tool-level gateway enforcement is not clearly established. | 5.0 | Review Docs |
| 8= | Clutch Security | Agent identity guardrailsMCP is in guardrail scope. Per-tool policy mechanics need validation. | 5.0 | Review Docs |
| 9 | Token Security | Agent discovery and postureMCP server discovery and monitoring are described, but per-tool enforcement is not established. | 4.0 | Review Docs |
| 10 | SailPoint Entro | Agent discovery and credential governanceMCP call scanning is documented for Claude Code, not general MCP authorisation. | 3.0 | Review Docs |
| 11 | Silverfort | Agent identity securityAn MCP tool-call gateway was not verified; no credit awarded. | 0.0 | Review Docs |
What the score measures
Enforcement on MCP server access and individual tool calls. Scores reflect cited public documentation, not independent deployment tests.
Read the rubric and weights