Repolode
Submit
zalando-incubator

zalando-incubator/agentic-identity-broker

An identity broker that lets AI agents act on users' behalf via scoped, revocable OAuth2 delegation, without sharing raw credentials.

View on GitHubWebsite
Stars
58
Forks
8
Open issues
76
Last commit
8 hours ago

What is it?

Agentic Identity Broker manages delegation chains for on-behalf-of flows in agentic AI systems. It bridges different OAuth2 infrastructures and includes a token vault, so agents and MCP servers do not need to implement the full OAuth2 flow themselves. It is designed to sit in the call path behind a gateway such as Agentgateway, which performs token exchange centrally.

For end users, the project provides a consent interface for granting agents granular permissions to services such as Google, GitHub, Databricks, and Linear. Administrators can register agents, authenticate principals, and manage sessions. Security features include sensitive value redaction, command injection prevention, cryptographic validation, and a fail-closed design.

The project is written in Go, uses MIT licensing, and is in active development. Structured JSON audit logging is included for compliance and monitoring.

Key features

  • 01Manages OAuth2 delegation chains for agent on-behalf-of flows
  • 02Token vault for securely storing and handling tokens
  • 03Consent management UI for granting scoped permissions per service
  • 04Agent registration, principal authentication, and session management
  • 05Structured JSON audit logging
  • 06Security controls including sensitive value redaction and fail-closed behavior

Use cases

  • Giving internal MCP servers OAuth2 access without building auth into each server
  • Offering a consent surface for MCP servers in a SaaS product with an audit trail
  • Letting hosted agents use a single user token across multiple MCP servers
  • Requiring central approval for sensitive tool calls such as sending emails or sharing documents

Things to know

  • The README describes the project as in active development, so it may be early-stage.
  • It is designed to be deployed in the call path behind a gateway such as Agentgateway, which adds setup effort.

In collections

Open-source AI agent frameworks & appsMCP serversLogin, SSO & identity servers

Topics

#ai-agents#oauth2#identity#mcp#access-control#consent-management#golang#agentic#ai#identity-broker

FAQ

What is agentic-identity-broker?
An identity broker that lets AI agents act on users' behalf via scoped, revocable OAuth2 delegation, without sharing raw credentials. Agentic Identity Broker manages delegation chains for on-behalf-of flows in agentic AI systems. It bridges different OAuth2 infrastructures and includes a token vault, so agents and MCP servers do not need to implement the full OAuth2 flow themselves. It is designed to sit in the call path behind a gateway such as Agentgateway, which performs token exchange centrally.
Is agentic-identity-broker free to use? What license does it have?
agentic-identity-broker is open source under the MIT license. Check the license terms before using it in commercial products.
Is agentic-identity-broker still maintained?
Actively maintained. The last commit to agentic-identity-broker was on Nov 7, 2026.
What can I use agentic-identity-broker for?
Giving internal MCP servers OAuth2 access without building auth into each server Offering a consent surface for MCP servers in a SaaS product with an audit trail Letting hosted agents use a single user token across multiple MCP servers Requiring central approval for sensitive tool calls such as sending emails or sharing documents
Where can I get agentic-identity-broker?
The source code and installation instructions are on GitHub: https://github.com/zalando-incubator/agentic-identity-broker

Summary generated by AI from the project's README. GitHub stats refresh daily.

Related projects