Agent identity standards tracker
In short:We track eight standards that matter for agent identity and which scored platforms name each in public material. Aembit and Descope name the most. Several platforms name only MCP. No scored platform names CIBA or RFC 8693 token exchange in the material we read.
| Platform | OAuth 2.1 | MCP authorization | Enterprise-Managed Authorization | Client ID Metadata Documents | SPIFFE | DPoP and mTLS | CIBA | OAuth token exchange |
|---|---|---|---|---|---|---|---|---|
| NewCore | Not found | Not found | Not found | Not found | Not found | Not found | Not found | Not found |
| Aembit | Named | Named | Named | Not found | Named | Not found | Not found | Not found |
| Descope | Named | Named | Named | Named | Named | Named | Not found | Not found |
| Silverfort | Not found | Not found | Not found | Not found | Not found | Not found | Not found | Not found |
| Cyera Identity | Not found | Not found | Not found | Not found | Not found | Not found | Not found | Not found |
| Astrix Security | Not found | Not found | Not found | Not found | Not found | Not found | Not found | Not found |
| Idira | Named | Named | Not found | Not found | Not found | Not found | Not found | Not found |
| SailPoint Entro | Not found | Not found | Not found | Not found | Not found | Not found | Not found | Not found |
| Clutch Security | Not found | Not found | Not found | Not found | Not found | Not found | Not found | Not found |
| Token Security | Not found | Not found | Not found | Not found | Not found | Not found | Not found | Not found |
Named means the platform's public material names the standard. Not found means we did not find it in the material read on 3 November 2026.