Persistent agent identity
Give every agent a globally unique principal with an owner, environment, risk level, and lifecycle.
agent://acme/engineering/deployer-prodGive AI agents persistent identities, short-lived credentials, scoped permissions, delegated authority, and complete audit trails.
Works with your existing agent & identity stack
One human can now create dozens of agents that act, spend, and delegate. Your infrastructure still sees one anonymous API key.
service-account-01api-key-prodowner: unknownEverything autonomous software needs to act safely across your infrastructure.
Give every agent a globally unique principal with an owner, environment, risk level, and lifecycle.
agent://acme/engineering/deployer-prodReplace permanent secrets with credentials scoped to the exact task, resource, and moment.
Pass only the permissions a subagent needs, with strict depth, time, and spend limits.
Trace every tool call back through the credential, policy decision, agent, and human principal.
Put human approval exactly where risk increases—without slowing down routine work.
Issue scoped authority in a few lines. Delegra handles identity, policy evaluation, credential issuance, and the audit chain.
01import { Delegra } from "@delegra/sdk";0203const agent = await Delegra.agent({04 name: "accounts-payable",05 owner: "sarah@acme.com"06});0708const authority = await agent.delegate({09 permissions: ["invoice.read", "payment.create"],10 constraints: { "payment.max": 10_000 },11 expiresIn: "2h"12});Connect any agent to any tool without exposing the underlying long-lived secret.
requestscoped tokenHard boundaries for financial actions, production access, sensitive data, and downstream delegation.
Self-host the core for free, or let Delegra operate the identity layer for you.
Everything you need to build locally and deploy in your own infrastructure.
Managed identity infrastructure for teams shipping production agents.
Advanced federation, governance, and support for critical workloads.
Build autonomous systems that can prove who they are, who authorized them, and what they’re allowed to do.