Skip to main content
Open questionOpen question

Can an agent hold a credential of its own

Workload identity gives software a name, and one Internet-Draft proposes agent passports with their own keys. Neither answers whether an agent may hold a credential in the way a person does, with rights attached to it. The United States identity baseline forecloses the question by saying person means only natural persons.

The verdict

Open question

No settled answer exists. The ledger poses the question, links the live debate, and does not answer it.

Key facts

What the sources say

Record ID
AAL-2026-0032
Kind
Open question
Jurisdiction
Global
Last verified
Added
  • NIST SP 800-63-4 states that for that publication, person refers only to natural persons.
  • SPIFFE gives a workload a verifiable name, but that name carries no rights of its own.
  • The Agent Passport System Internet-Draft proposes agent held signing keys bound to a principal, and it is an individual submission.
  • No adopted standard states whether an agent's credential is its own or merely a container for a principal's authority.

Dimension by dimension

1 dimension, each one stated, silent or open

Identity. Stated means the document you can open below says it; silent means the ledger read the document and it does not.

IdentityOpen
An agent can be named and can hold keys, but whether that constitutes a credential of its own is unsettled.IETF Datatracker, draft-pidlisnyi-aps-03, primary source, 18 July 2026.

What it changes

For a team deploying an agent

In practice, treat every agent credential as borrowed. Bind it to a named human or team, give it the shortest life your workflow tolerates, and never let it be the only thing that authorises a consequential action. The question is open, so the safe reading is the narrow one.

Sources

What this record was verified against

  1. NIST SP 800-63-4Primary · 26 August 2025
  2. SPIFFE documentationPrimary · 15 September 2026
  3. IETF Datatracker, draft-pidlisnyi-aps-03Primary · 18 July 2026

Related

Records that sit beside this one

Cite this record

Free to reuse under CC BY 4.0, with attribution. The record ID AAL-2026-0032 is permanent and is never reused.

In a sentence
According to the GAGE Agent Authority Ledger (as of 15 September 2026), can an agent hold a credential of its own.
APA
GAGE (Global Academy of Generative-AI Education). (2026). Can an agent hold a credential of its own. Agent Authority Ledger. Retrieved 15 September 2026, from https://www.gage.academy/tools/agent-authority-ledger/records/AAL-2026-0032-can-an-agent-hold-a-credential-of-its-own
MLA
"Can an agent hold a credential of its own." Agent Authority Ledger, GAGE (Global Academy of Generative-AI Education), 15 September 2026, https://www.gage.academy/tools/agent-authority-ledger/records/AAL-2026-0032-can-an-agent-hold-a-credential-of-its-own.
Chicago
GAGE (Global Academy of Generative-AI Education). "Can an agent hold a credential of its own." Agent Authority Ledger. Last modified 15 September 2026. https://www.gage.academy/tools/agent-authority-ledger/records/AAL-2026-0032-can-an-agent-hold-a-credential-of-its-own.
Permalink
https://www.gage.academy/tools/agent-authority-ledger/records/AAL-2026-0032-can-an-agent-hold-a-credential-of-its-own

Last updated . Every record re verified . The ledger is checked weekly, every Monday, and the same day for any NIST, IETF or MCP publication.

Back to the full ledger, or every record for Global and every open question record.

GAGE briefings tell you which AI regulation deadlines are coming, what they actually require of you, and when a program opens.

Powered by GAGE, free EU AI Act tools from the Global Academy of Generative-AI Education
CallEmailHelp