IBM Agent Identity
IBM's generally available control plane that registers AI agents as identities with delegation, task-scoped tokens and audit trails.
Overview
IBM Agent Identity became generally available on October 26, 2026 as a control plane that treats AI agents as identities. It keeps a central registry with ownership, metadata, risk classification, approved tool connections and lifecycle state, preserves on-behalf-of delegation across identity providers, and issues short-lived, task-scoped OAuth tokens with consent-aware authorization for sensitive actions. It integrates with IBM Verify for authorization and audit and HashiCorp Vault for just-in-time, target-specific credentials, with an onboarding path for agents built in watsonx Orchestrate, and is designed to work alongside existing identity providers.
This is a sourced directory entry. Features and capabilities are reported in the linked sources; this entry does not document independent Aymorphic testing.
Key features
- Central agent registry with owner, risk class, approved tools and lifecycle state
- On-behalf-of delegation preserved across identity providers and token exchanges
- Short-lived, task-scoped OAuth tokens with consent-aware authorization
- Runtime policy enforcement and credential control during agent execution
- Audit trail linking human identity, agent identity, credential issuance and policy decisions
Use cases
- Governing which enterprise agents can reach which systems and on whose authority
- Replacing static API keys in agents with just-in-time credentials via Vault
- Producing audit evidence for agent actions in regulated workflows
Pricing
Unknown; IBM's announcement does not state pricing.
Pricing reflects the source record and may change. Confirm current terms with the provider.
Dates and sources
- Released
- 26 Oct 2026
- Record updated
- 2 Nov 2026
- Record last checked
- 2 Nov 2026