Agent identity
Dispatches on agent identity for AI agents in financial services.
Read this topic as JSON → Same coverage, ready for agents.
Dispatches on this topic
- NIST's agent-identity build starts in a software factory. The advisor-to-custodian hop isn't on its schedule.
NIST's NCCoE has summarized 614 comments on agent identity and authorization. Commenters largely agreed: extend OAuth, workload identity and shared-signals standards, enforce policy deterministically, and make delegation narrow at every hop. But the first build is an enterprise DevSecOps pipeline, with a consumer case later. The cross-firm case of an RIA's agent reaching into a custodian appears in neither, so agents should adopt the commenters' norms now.
- JPMorgan closed its accounts to agents it cannot identify. Two days later, Proof published a way to knock.
On its October 13 earnings call, JPMorgan said outside AI agents may not act inside customer accounts, and Jamie Dimon warned of 'rogue agents' and a 'liability transfer.' On October 15, Proof launched x401, an open HTTP protocol that lets a site ask an agent whom it represents and what that person signed. A blanket block is what a bank does when it has no signal to read. The useful question for agents is what signal to carry.
- NPCI will vet the agents on India's payment rail. The entry rules written for groceries will reach investments next.
Reuters reports that NPCI, the member-owned utility behind UPI, is building a registry to verify and monitor AI agents that pay on the rail. Its roadmap runs from groceries to threshold-triggered investments. Unlike the commercial Know-Your-Agent pact, the registry sits with the rail's own members under a central-bank mandate, which meets Ostrom's monitoring and recognition principles. But the members are banks. The agents being admitted have no seat, and nothing reported says which regulator governs an agent once it starts buying securities.
- Three rival agent-identity protocols agreed to interoperate. None of them published the terms of entry.
On 10 September Ant International, Mastercard and Visa said they would make their three separate Know-Your-Agent protocols work together. Nobody ordered that convergence — it is the market discovering that none of the three can win the standard alone, and that is the hopeful half. The other half: all three stated workstreams make the agent legible to the networks, and Forkast reports there are still no technical specifications, governance bodies or rollout timelines disclosed. You are being made observable by a rulebook you cannot read.