Let’s talk about why your AI agent just got a better ID than you have.
Think about the last time you had to prove you were you. The bank branch, the FICA forms, the passport photo that makes you look like someone being processed — because that’s exactly what’s happening. You hand over the ID book and the utility bill, and a person squints at the photo, squints at you, and decides the paperwork matches the face.
That whole ritual is about to look like archaeology. Because while you were standing in that queue, the machines got themselves an identity system that works better than yours.
Here’s the pattern. In the last year, every serious player in enterprise software started selling the same product: identity for AI agents. Okta launched Okta for AI Agents with the tagline that every agent needs an identity. Microsoft built Entra Agent ID. Ping and SailPoint shipped agentic identity products. Snowflake gave its native agents cryptographically verified credentials. And Google put Agent Identity and an Agent Registry into its enterprise platform — every agent assigned a verifiable cryptographic ID, an auditable record of what it did, and access policies tied to that ID.
The security industry has even coined the framing: agents must be treated as first-class identity subjects.
So let’s be clear about what exists now. The machine has credentials it can prove, that travel with it, that any system can check in milliseconds.
You don’t have that.
You have a password you’ve reused since 2019, a bank app that texts you a code, and a face that gets scanned at border control. Your identity is scattered across a dozen silos — none of which you control, all of which leak. The machine’s identity is portable, verifiable, and revocable. Yours is fragmented and unprovable.
Now think about what that gap does to the agent economy.
Your agent walks into a bank, an insurer, a government portal, carrying a credential that says exactly what it’s allowed to do and who authorised it. It gets verified instantly. It leaves an audit trail. Meanwhile you, the human who owns the agent, are still doing SMS codes and squinting at captchas.
Who does the system trust more? The party it can verify. And the party it can verify is the machine.
That’s the inversion nobody’s talking about. We spent a decade being told the machine is the risk — deepfakes, cloned voices, synthetic identities. So the industry’s answer was to give the machines the good ID system first. And to be fair, it is a good system: cryptographic, scoped, auditable. The problem is who holds the keys.
Every vendor selling agent identity sells it as security. And it is security — for the platform. The registry is theirs. The issuance is theirs. The revocation is theirs. The ID your agent carries is a passport issued by the state that controls the border. They aren’t building identity for machines because they love machines. They’re building it because identity is the most valuable control layer ever invented. Whoever issues the ID decides what the agent can do, where it can go, and whether it still exists tomorrow. That’s not a security feature. That’s a lease.
And here’s the part that should actually annoy you. The same companies racing to hand machines portable, verifiable identity spent years resisting the equivalent for humans — a credential that proves one specific thing about you without exposing your whole life. Selective disclosure. Proof without surrender. The technology exists. It’s been ready for years. It never got deployed at scale, because it doesn’t fit the business model. A human with a portable, self-sovereign ID doesn’t need the platform to vouch for them. But a machine with a platform-issued ID is a machine the platform can switch off.
So ask the operator question. Your business is going to run agents — sales agents, support agents, agents that negotiate with other agents. Who issues those agents their identity? If it’s the platform, then your ability to act in the machine economy is rented. The platform can scope you, rate you, revoke you. And when your agent’s ID dies, your agent doesn’t exist. It’s the app store all over again — except the thing being taxed isn’t your revenue. It’s your ability to be anyone at all.
The lesson isn’t to refuse the technology. It’s to demand the architecture that keeps the human on top. Your agent should carry credentials you issued, you can revoke, that prove a specific capability without exposing the whole operation. And you should get the same standard: a way to prove one fact about yourself without handing over your life.
Because right now, the machine is getting the sovereignty treatment and the human is getting the loyalty card.
That’s backwards. The machine needs proof so it can be held accountable. You need proof so you can stay free. Both are worth building. But if the only party walking around with a verifiable identity is the machine, then in every automated transaction the machine is the trusted customer — and you’re the risk to be managed.
The machines already have their passports. The question is who signs them. Build like the answer has to be you.
You’ve got this.