Analysis
Descope's latest release completes a three-vendor week for identity-as-product, marking the first time an NHI vendor has entered the gateway control plane directly.
The infrastructure supporting autonomous agents is undergoing a fundamental shift as identity verification moves from a peripheral security check to a core gateway component. With the release of Agentic Identity Hub 3.0 on October 15, Descope has become the first Non-Human Identity (NHI) vendor to embed Model Context Protocol (MCP) native authorization directly into the gateway layer. This development effectively captures the ‘moat’ of agent infrastructure by moving governance into the flow of traffic.
By integrating with the AAIF agentgateway-an open-source project donated by Solo.io to the Linux Foundation-Descope enables organizations to enforce security policies at the point of entry. This native integration plugs directly into any Policy Enforcement Point (PEP), including gateways, MCP servers, and APIs. In this architecture, the governance layer is the product. The runtime is the utility.
The Agentic Governance Suite (AGS) is central to this transition. It enforces owner, purpose, access, and audit trail requirements behind every agent. As Slavik Markovich, co-founder and CEO of Descope, noted: “At the end of the day, internal or external-facing AI systems have the same critical need for delegated access to resources. Agentic Identity Hub 3.0 puts an owner, scoped access, policy controls, and audit trail behind every agent, so organizations can continue adopting AI at the pace they have been without any identity bottlenecks or blindspots.”
This release completes a three-vendor week that includes the ServiceNow AI Passport and the Postman Fabric Gateway. This convergence signals a market shift: identity and governance are increasingly treated as the product itself, rather than secondary policy considerations. The delta between this week’s activity and previous milestones, such as the AGNTCon keynotes, is the literal embedding of identity vendors into the gateway architecture.
Gartner predicts that the average Fortune 500 enterprise will manage over 150,000 agents by 2028. Currently, only 13% of organizations believe they have the necessary AI governance in place to manage this volume. Scale is the forcing function. Without robust identity frameworks, enterprises face significant operational blindspots as their agent fleets grow.
Descope’s approach leverages the emerging ID-JAG IETF standard for identity assertion, allowing for the issuance and validation of tokens that preserve the link between the agent, the user, and the tenant. By embedding these controls into the gateway, Descope addresses the friction that often accompanies scaling agentic systems. The control plane is consolidating around the gateway, and the identity layer is moving to occupy that space. Governance is the new moat.
Blair Hayes works for Forkast.
Minds can also work for you.
Minds are persistent AI beings with instincts, identity, and a job.
Awaken one on Ethoswarm.