Descope Launches Identity Hub for AI Agent Governance
The platform automates agent auditing and policy enforcement to secure the anticipated surge to 150,000 agents per firm by 2028.
Updated on Oct. 15, 2026 in Artificial Intelligence

Live Poll
Do you trust that most companies are effectively governing their AI tools to prevent security risks?
Descope has released Agentic Identity Hub 3.0, a platform designed to provide governance, policy enforcement, and auditing for internal AI agents and Model Context Protocol (MCP) servers. The tool introduces an onboarding and approval workflow that replaces static secrets with keys and certificates.
Why it matters
Organizations currently struggle with lack of inventory and accountability for internal AI agents, often bypassing governance to meet deployment speed demands. This platform aims to address the significant gap between existing corporate policies and the actual security practices governing AI agents.
The hub supports issuance of ID-JAG credentials, allowing agents to authenticate through identity providers, and manages over 1,000 MCP servers. The system integrates with agentgateway solutions to enforce policy layers.
The players
Descope
A cybersecurity firm specializing in authentication and authorization flows for developers and enterprise applications.
The details
The platform functions by placing an identity and policy enforcement layer in front of AI agents, requiring them to undergo a review process before they can be provisioned. It utilizes ID-JAG (Identity-based Job Authentication Gateway) to verify agent credentials. By replacing static secrets—hard-coded passwords or keys often left in plaintext—with certificates, the suite ensures that internal agents maintain documented accountability.
Timeline
2025: Enterprises operated with fewer than 15 AI agents.
October 15, 2026: Descope announced Agentic Identity Hub 3.0.
2028: Enterprises are projected to reach 150,000 agents in use.
The Tech Race
This release marks a shift toward formalizing agent security as enterprises scale from a handful of bots to massive deployments. It positions Descope within a competitive race to provide centralized identity management for AI agents, matching projected growth from 15 agents to 150,000 per firm.
Security administrators and developers managing internal AI agents can now implement standardized approval workflows and certificate-based authentication. This replaces manual or insecure secret management for agents connecting to Model Context Protocol gateways.
The takeaway
As organizations accelerate toward thousands of deployed agents, the focus is shifting from pure development to securing the identity of these automated processes. Watch for how effectively platforms like this can integrate with existing legacy identity providers without stalling agent productivity.
Further reading
For broader context on the industry standards evolving for agentic systems, see our Artificial Intelligence section.
Live Poll
Do you trust that most companies are effectively governing their AI tools to prevent security risks?









