Agentic Identity IndexAembit agent identity review
Short-lived credentials and delegated MCP access
Agent discovery 6.0 / Per-action policy 8.5 / Agent credentials 9.0
General purpose score 7.53 joint
Where it falls short
- A human approval step was not verified in the documentation reviewed.
- Wide enterprise agent discovery is not the central gateway workflow.
Documented strengths
- Workload identities and blended human-agent context identify the caller.
- Identity Gateway checks access policies for MCP interactions and tool use.
- Per-request exchange supplies scoped, short-lived credentials without exposing backend secrets to the agent.
Every score, with its reason
Agent identity and ownership 8.5
Workload identities and blended human-agent context identify the caller.
Official source / Verified 2026-11-04
Agent discovery 6.0
The documented gateway manages connected agents. Broad shadow-agent discovery is not established here.
Official source / Verified 2026-11-04
Per-action policy 8.5
Identity Gateway checks access policies for MCP interactions and tool use.
Official source / Verified 2026-11-04
Agent credentials 9.0
Per-request exchange supplies scoped, short-lived credentials without exposing backend secrets to the agent.
Official source / Verified 2026-11-04
Delegation and on-behalf-of access 9.0
Blended identity preserves the human on whose behalf an agent acts.
Official source / Verified 2026-11-04
Audit and lifecycle 8.0
MCP authorisation events can be traced in the documented logs.
Official source / Verified 2026-11-04
Human approval 0.0
No human approval workflow was verified in the cited MCP documentation; no credit awarded.
Official source / Verified 2026-11-04
MCP gateway and tool control 9.0
MCP Authorization Server and Identity Gateway are documented as available.
Official source / Verified 2026-11-04
Ownership and pricing
Standalone vendor / Ownership source
Starter free; Teams $20 per agent per month; Enterprise quote only / Pricing source