Works with your favorite agent harnesses and SDKs
Authenticated
Every agent and sub-agent authenticates with its own credentials before acting. The delegation chain back to the user or upstream agent is recorded before any tool runs.
Authorized
Ory applies fine-grained authorization to shell commands, file writes, MCP tools, and API calls — the same policy model that governs human access.
Accountable
Every action is recorded and exported through OpenTelemetry to your SIEM. The delegation chain outlives the token, so the trail holds even after credentials expire.
How Ory's agent security works
Authenticate agent identities
Ory resolves the agent’s identity inside the harness, whether it was started by a human, another agent, or a headless process. Each agent gets its own credentials and audit attribution, so teams can see which agent acted, where it ran, and how it was delegated.
Apply fine-grained authorization
Before an agent action runs, Ory checks the requested tool against Ory Keto (Permissions). Shell commands, file writes, web fetches, and other harness tools can be enforced through the same Zanzibar-style permission model used for application access.
Enforcement that fits your risk tolerance
Every agent action hits a decision point before it runs. Observe first, enforce when ready — by category or down to the command. Cut off any agent instantly.
Observability across agent activity
Every permission check, tool call, and sub-agent start is recorded: who started the session, which agent acted, what it attempted, and which policy decided.
Get started with your preferred AI tool
Anthropic Claude Agent SDK
The Anthropic Claude Agent SDK is a developer framework by Anthropic that enables the programmatic creation and deployment of autonomous AI agents capable of multi-turn reasoning, executing code, and interacting with file systems and external tools.
Gemini CLI
Gemini CLI is an open-source AI agent developed by Google that brings the power of Gemini models directly into your terminal, enabling developers to understand code, automate complex workflows, and execute tasks using natural language prompts.
OpenAI Codex
OpenAI Codex is an AI-powered coding agent designed to automate software development tasks by navigating codebases, generating features, debugging issues, and executing tests directly in an isolated terminal or cloud environment.
Microsoft Agent Framework
Microsoft Agent Framework is an open-source SDK and runtime by Microsoft for building, orchestrating, and deploying enterprise-grade AI agents and multi-agent workflows in Python and .NET.
Frequently asked questions
More on agent security
Your audit log says the service account did it
AI agents act with human credentials and leave a record that cannot answer the only question that matters. Ory Agent Security closes the gap.
Ory DX: Build secure apps at the speed of thought, the right way.
Ory DX is the ultimate developer toolkit that unifies AI automation with Ory’s hardened security ecosystem. By seamlessly blending Model Context Protocol (MCP) servers, plugins, CLI, and Ory Elements, it gives developers a conversational, agent-led workflow to develop enterprise-ready identity, access management, and fine-grained permissions.
