Teleport agent identity review
Cryptographic agent access to infrastructure
Agent discovery 4.0 / Per-action policy 8.0 / Agent credentials 9.0
General purpose score 6.68
Where it falls short
- Agent identity entitlements differ between Community and Enterprise tiers.
- Trusted runtimes are beta and broader shadow-agent discovery is not verified.
Documented strengths
- The feature matrix lists per-agent cryptographic identity and agent-owner linkage in Enterprise tiers.
- Identity-based RBAC gates access to enrolled MCP servers and infrastructure.
- Enterprise tiers list short-lived agent credentials without standing privileges.
Every score, with its reason
Agent identity and ownership 8.0
The feature matrix lists per-agent cryptographic identity and agent-owner linkage in Enterprise tiers.
Official source / Verified 2026-11-04
Agent discovery 4.0
Resources and MCP servers are enrolled; broad shadow-agent discovery is not verified.
Official source / Verified 2026-11-04
Per-action policy 8.0
Identity-based RBAC gates access to enrolled MCP servers and infrastructure.
Official source / Verified 2026-11-04
Agent credentials 9.0
Enterprise tiers list short-lived agent credentials without standing privileges.
Official source / Verified 2026-11-04
Delegation and on-behalf-of access 4.0
Owner linkage is documented; an agent-on-behalf delegated user flow was not verified.
Official source / Verified 2026-11-04
Audit and lifecycle 9.0
Per-tool MCP audit events are documented across tiers.
Official source / Verified 2026-11-04
Human approval 0.0
A tool-action human approval workflow was not verified; no credit awarded.
Official source / Verified 2026-11-04
MCP gateway and tool control 8.5
MCP enrollment, proxying and identity-based access control are documented.
Official source / Verified 2026-11-04
Ownership and pricing
Standalone vendor / Ownership source
Quote only / Pricing source