Clutch Security agent identity review
Cross-environment discovery and lineage
Agent discovery 9.0 / Per-action policy 7.0 / Agent credentials 6.0
General purpose score 5.95
Where it falls short
- Human approval and delegated token flows were not verified.
- Validate enforcement at the tool-call boundary rather than relying on inventory alone.
Documented strengths
- Agent lineage maps deployer, tools, identities and reachable resources.
- Cross-environment discovery includes agents and their connected resources.
- Policy triggers and enforcement decisions include lineage context.
Every score, with its reason
Agent identity and ownership 8.0
Agent lineage maps deployer, tools, identities and reachable resources.
Official source / Verified 2026-11-04
Agent discovery 9.0
Cross-environment discovery includes agents and their connected resources.
Official source / Verified 2026-11-04
Per-action policy 7.0
Agent Guardrails describes context-aware enforcement across tools, identities and resources.
Official source / Verified 2026-11-04
Agent credentials 6.0
Migration away from static credentials is described; agent-specific broker detail is limited.
Official source / Verified 2026-11-04
Delegation and on-behalf-of access 3.0
Identity lineage is mapped. An explicit delegated token flow was not verified.
Official source / Verified 2026-11-04
Audit and lifecycle 8.0
Policy triggers and enforcement decisions include lineage context.
Official source / Verified 2026-11-04
Human approval 0.0
Human approval before execution was not verified; no credit awarded.
Official source / Verified 2026-11-04
MCP gateway and tool control 5.0
MCP is in guardrail scope. Per-tool policy mechanics need validation.
Official source / Verified 2026-11-04
Ownership and pricing
Standalone vendor / Ownership source
Quote only / Pricing source