Non-Human Identity · Agent identity · Least privilege · Runtime authorization
Give agents defined authority.
Connected agents can retrieve records, change information and trigger processes. Excessive or shared permissions make actions harder to control and attribute.
Evaluate agent and non-human identities, delegated permissions, secrets management and runtime authorization.
Outcome to work toward: Named owners, scoped access, traceable actions and approval requirements for consequential changes.
Recommended starting shortlist- Microsoft Entra
- Okta
- CrowdStrike Falcon Next-Gen Identity Security
Why these options?
Microsoft and Okta are Leaders in Forrester’s Workforce Identity Security Platforms Wave, Q2 2026. CrowdStrike is a Leader in GigaOm’s 2026 ITDR Radar. These adjacent identity evaluations inform the shortlist; they do not rank agent identity products.
MCP Gateway · API controls · Delegated authority
Control AI Tool Access
An approved agent can still call an inappropriate tool or pass more data than a task requires.
Evaluate MCP access controls and runtime authorization at the points where agents invoke tools and APIs.
Outcome to work toward: An approved tool inventory, enforced access decisions and records of sensitive tool calls.
Recommended starting shortlist- Cloudflare MCP server portals
- PlainID runtime authorization
Why these options?
This emerging-category shortlist is based on documented capabilities. A comparable analyst ranking was not verified. Identity, tool and parameter coverage must be assessed in your environment.
