Agent identity & auth

10 systems in the agent identity & auth category of the AI Agent Infrastructure Landscape, grouped by maturity tier.

Tier 3 — emerging (10)

  • Auth0 for AI Agents Product

    Auth0's identity layer for AI agents, covering user authentication, calling first- and third-party APIs on a user's behalf through delegated authorization, asynchronous human-in-the-loop approval (CIBA), fine-grained authorization for RA…

  • Descope Agentic Identity Hub Product

    Identity provider for AI agents and MCP servers that adds auth, consent, SSO, access control and policy to AI systems. It also manages purpose-built agent credentials for downstream connections and keeps a directory of an organization's …

  • Keycard Product

    Runtime auth for agents that gives each agent its own identity and issues just-in-time, scoped credentials after verifying the workload, the user it acts for, and policy.

  • Merge Agent Handler Product

    Production MCP connectors that link AI agents to thousands of enterprise tools, with guided user authentication, data-access controls and observability built in.

  • Nango Product

    Code-first integration platform that connects products and AI agents to 1,000+ APIs. It handles end-user OAuth, MCP and tools, syncs, webhooks and a request proxy.

  • Okta Cross App Access (XAA) Product

    Okta-backed protocol for secure agent-to-app and app-to-app access, letting enterprise IT admins manage and audit which agents connect to which applications instead of relying on shared credentials or embedded tokens.

  • Paragon ActionKit Product

    One API and MCP server that gives an AI agent product 1,000+ integration actions, with Paragon's embedded UI handling end users' authentication to their external apps.

  • Pipedream Connect Product

    Integration layer for AI agents with managed per-user auth and 10,000+ prebuilt tools across 3,000+ APIs. It is exposed through a remote MCP server, an SDK or a raw API proxy.

  • Stytch Connected Apps Product

    Turns an app into an OAuth 2.0/OIDC identity provider so AI agents and MCP clients can be authorized against it. It handles token issuance, validation and revocation with user-controlled, token-based permissions.

  • WorkOS AuthKit for MCP Product

    WorkOS AuthKit acts as an OAuth 2.1 authorization server for MCP servers, giving AI agents scoped access to an app with PKCE, scopes and tool permissions. WorkOS Connect can provide only the MCP OAuth flows in front of an existing user s…