Descope’s Agentic Identity Hub 3.0 takes aim at shadow AI agents inside companies

Descope Inc., a customer and agentic identity platform company, has released Agentic Identity Hub 3.0, a solution aimed at securing artificial intelligence agents within organizations. This update targets the growing issue of "shadow AI," where employees rapidly build and adopt agents without proper oversight. The problem is compounded by the fact that many of these agents run on shared, long-lived credentials with no recorded owner, as highlighted by Verizon Communications Inc.'s 2026 Data Breach Investigations Report.

To address this, Descope introduces an Agent Onboarding Portal, requiring employees to request agents through a self-service catalog. Each request is vetted, assigning an accountable owner and scoped access. Approved agents are then integrated with the platform, ensuring they have proper authorization. The new version of the hub works seamlessly with Model Context Protocol (MCP) gateways, providing a unified identity and policy layer for all agents and MCP servers, including third-party services like OpenAI Group PBC's ChatGPT.

Additionally, Descope takes steps to mitigate the risks associated with static client secrets, which often leak into code repositories and are seldom rotated. With the new client authentication options, agents can sign short-lived assertions using private keys that remain within the client itself. This results in a login experience akin to single sign-on for internal agents, with access to MCP servers granted automatically after the initial sign-in.

Security policies are enforced on every request, and administrators can revoke an agent's access from a single location without needing to reissue credentials. This is made possible through identity assertion grants, which also support Cross-App Access, a functionality Descope began supporting in September. Descope's Agentic Identity Hub has already gained traction, handling authentication and access control for hundreds of MCP servers and over 1 million agent identities.

The company has raised a total of $88 million in funding since its seed round in September 2025, with notable backers including Notable Capital, Lightspeed Venture Partners, Dell Technologies Capital, and Unusual Ventures.