Token Security agent identity review
Agent inventory, access maps and intent monitoring
Agent discovery 9.0 / Per-action policy 6.5 / Agent credentials 5.0
General purpose score 5.55
Where it falls short
- Discovery does not establish credential brokering or delegated authorisation.
- Human approval and per-tool MCP enforcement need demonstration.
Documented strengths
- Agent discovery includes owner attribution and access mapping.
- The product describes discovery of agents, MCP servers and machine identities.
Every score, with its reason
Agent identity and ownership 8.0
Agent discovery includes owner attribution and access mapping.
Official source / Verified 2026-11-04
Agent discovery 9.0
The product describes discovery of agents, MCP servers and machine identities.
Official source / Verified 2026-11-04
Per-action policy 6.5
Intent-based intervention is described; per-action enforcement mechanics are not fully documented.
Official source / Verified 2026-11-04
Agent credentials 5.0
Credentials and permissions are inventoried. Ephemeral credential issuance is not verified.
Official source / Verified 2026-11-04
Delegation and on-behalf-of access 3.0
Access context is mapped; delegated token semantics are not verified.
Official source / Verified 2026-11-04
Audit and lifecycle 7.5
Agent action monitoring and multi-agent traceability are described.
Official source / Verified 2026-11-04
Human approval 0.0
A pre-action human approval workflow was not verified; no credit awarded.
Official source / Verified 2026-11-04
MCP gateway and tool control 4.0
MCP server discovery and monitoring are described, but per-tool enforcement is not established.
Official source / Verified 2026-11-04
Ownership and pricing
Standalone vendor / Ownership source
Quote only / Pricing source