
HashiCorp Vault already secures non-human identities for organizations including ABN AMRO, Adobe, athenahealth, BBVA, BlackRock, Canva, Duke Energy, Expedia, London Stock Exchange, Starbucks, and Swiss Federal Railways. Now, HashiCorp will extend those capabilities to AI agents, issuing secured, short-lived credentials that limit each agent to what it needs, IBM says.
When used with HashiCorp Vault, Agent Identity registers agents in a central inventory, captures ownership and metadata, classifies risk, documents approved tool connections, and becomes the authoritative record for each agent, such as who owns it, its lifecycle status, and the authority it has been granted, according to IBM.
Built to extend existing identity and security investments, Agent Identity supports Okta, Entre, PING, and others to act as an agent registry. It then can share relevant identity and authorization context with Vault’s credential controls—enforcing least-privilege access and enabling real-time revocation when an agent attempts an unauthorized action, according to IBM. Once an agent is known, IBM Agent Identity helps control how it acts, IBM stated.




















