00You
Enterprise · EACH 1
Every agent starts inside the lines. The record proves it never left.
Who answers for it, what it may touch, how long its access lasts and what happens when that person leaves: set by API once, enforced at every call, exported when an auditor asks.
The Agentic Identity Provider
- 00.1
Register an agent by API
Who answers for it
- 00.2
Draw its lines
What it may touch
- 00.3
Every call checked and refused at the edge
How long its access lasts
- 00.4
Stop it at the next call
What happens when that person leaves
01What hangs off you
- m.smith6 agentsgroup support-l2Active
- r.okafor4 agentsSCIM offboardOffboarded
- 01.1
Accountable to one named person
No agent runs without a named person answerable for it. Anchored to them by one call, not a second directory.
- 01.2
Bounded, and stoppable at the next call
A slice of one person's entitlements, never wider. Ten-minute tokens, re-checked at every call, so offboarding lands at the next one.
- 01.3
Proof, not reconstruction
One export, not a reconstruction. Every credential, refusal and revocation on one tamper-evident record.
Works with the people systems you already have
OIDC or SAML sign-in, SCIM offboarding, delegation from groups
02What it looks like in action
- Audit logChain verified
- 14:22:06Credential mintedsupport-agent-v2
- 14:24:51Refused, out of delegated scopesupport-agent-v2
- 14:31:02Operator deactivated, 4 agents suspended4 agents
- Audit recordChain verified
- Person
- m.smith
- Agent
- support-agent-v2
- Delegated by
- group support-l2
- Action
- crm:read
The evidence an auditor will accept
Every row carries the chain from person to agent to action. Export it and hand it over.
- 14:22:06Verified
Credential minted
- Agent
- support-agent-v2
- Operator
- m.smith
- Source
- group support-l2
- 14:24:51Verified
Refused, out of delegated scope
- Agent
- support-agent-v2
- Operator
- m.smith
- Source
- org policy v3
- 14:31:02Verified
Operator deactivated, 4 agents suspended
- Agent
- 4 agents
- Operator
- r.okafor
- Source
- SCIM offboard
| Time | Event | Agent | Operator | Source | Chain |
|---|---|---|---|---|---|
| 14:22:06 | Credential minted | support-agent-v2 | m.smith | group support-l2 | Verified |
| 14:24:51 | Refused, out of delegated scope | support-agent-v2 | m.smith | org policy v3 | Verified |
| 14:31:02 | Operator deactivated, 4 agents suspended | 4 agents | r.okafor | SCIM offboard | Verified |
Set the guardrails this week.
Count your agents first.