Identity

Today we’re going to answer the question everybody has been asking me: when an agent takes an action, whose identity should it use? The identity an agent carries decides whether you can attribute what it did, whether it can keep working while you’re asleep, whether it survives you changing teams or leaving the company, and how much damage a stolen credential does. Get it wrong and you either can’t use agents for any real life work, or you quietly build a privilege escalation into your company’s sensitive systems....

Everyone’s shipping AI agents right now. Connect your agent to Slack, let it read your email, have it make PRs on your behalf. This can be via MCP, no-code AI tools like n8n or direct via APIs. However, we’re in this awkward middle ground where the tooling to use agents is miles ahead of the tooling to secure them. The fundamental problem isn’t new, it’s the same challenge we’ve had with any system that acts on behalf of a user, but agents amplify it in ways that existing access control patterns weren’t built for....