Agent Registry
An agent registry is an inventory of the AI agents an organization runs or allows, recording for each one its identity, accountable human owner, purpose, permissions, creation and expiry, so that agents can be reviewed, governed and deprovisioned like any other identity. No open standard defines one yet: SWI's Agent Identity Standards Map 2026 rates the agent lifecycle registry as the one agent identity problem with no working-group draft at all, after two individual SCIM agent extension drafts expired.
What exists today is product-specific. Microsoft's agent registry in the Microsoft 365 admin center "provides a centralized view of all agents available for your organization" to monitor and govern them, and Okta describes Okta for AI Agents as discovering unregistered and shadow agents and assigning them named human owners. The W3C Agent Identity Registry Protocol Community Group has formed but published no drafts. Without a registry, agents become the orphaned, over-privileged identities that the OWASP Non-Human Identities Top 10 ranks first and fifth. Until a standard lands, put agents into your existing non-human identity inventory with an owner, a purpose and an expiry date.
See also: agentic identity, non-human identity, orphaned account, deprovisioning, Shared Signals Framework, AI identity vendors
Related on Start with Identity
- GlossaryMega-Seed
A mega-seed is a seed-stage funding round of $20 million or more. Start with Identity defined the term, and the related **mega-seed share** (the share of all pr
- GlossaryPrompt Injection
Prompt injection is a vulnerability in which input to a large language model alters its behavior or output in ways its developer did not intend, for example mak
- GlossaryAPI Key
A static secret string used to authenticate an application or caller to an API. Simple but weak: it does not expire on its own, is easy to leak, and should be v
- BlogBlack Hat USA 2026 recap: passkeys get broken (twice), and AI agents get an identity perimeter
Our identity takeaways from Black Hat USA 2026: two independent passkey implementation attacks, a wave of AI agent identity and governance launches, an open sou
- BlogIdentiverse 2026 recap: agentic identity grows up, and passkeys get real
Our takeaways from Identiverse 2026 in Las Vegas: AI agent identity moved from theory to roadmap, passkeys turned operational, deepfakes pressured identity veri
- Blog1 of 123 AI agent identity drafts at the IETF has been adopted, and 7 of 11 agent problems already have a standard
SWI's Agent Identity Standards Map 2026 dates the status of 70 specifications for AI agent authentication, delegation and authorization. Most of the problem is