Works with your favorite agent harnesses and SDKs
Authenticated
Every agent and sub-agent authenticates with its own credentials before acting. The delegation chain back to the user or upstream agent is recorded before any tool runs.
Authorized
Ory applies fine-grained authorization to shell commands, file writes, MCP tools, and API calls — the same policy model that governs human access.
Accountable
Every action is recorded and exported through OpenTelemetry to your SIEM. The delegation chain outlives the token, so the trail holds even after credentials expire.
How Ory's agent security works
Authenticate agent identities
Ory resolves the agent’s identity inside the harness, whether it was started by a human, another agent, or a headless process. Each agent gets its own credentials and audit attribution, so teams can see which agent acted, where it ran, and how it was delegated.
Apply fine-grained authorization
Before an agent action runs, Ory checks the requested tool against Ory Keto (Permissions). Shell commands, file writes, web fetches, and other harness tools can be enforced through the same Zanzibar-style permission model used for application access.
Enforcement that fits your risk tolerance
Every agent action hits a decision point before it runs. Observe first, enforce when ready — by category or down to the command. Cut off any agent instantly.
Observability across agent activity
Every permission check, tool call, and sub-agent start is recorded: who started the session, which agent acted, what it attempted, and which policy decided.
Get started with your preferred AI tool
Amp
Amp is an agentic AI coding tool developed by Sourcegraph that operates in your terminal and editor extensions, enabling developers to execute complex multi-file edits, plan architecture, and automate development workflows using frontier AI models.
Anthropic Claude Agent SDK
The Anthropic Claude Agent SDK is a developer framework by Anthropic that enables the programmatic creation and deployment of autonomous AI agents capable of multi-turn reasoning, executing code, and interacting with file systems and external tools.
Claude Code
Claude Code is an agentic AI coding tool developed by Anthropic that operates directly in your terminal, enabling developers to navigate codebases, build features, debug issues, and automate routine tasks using natural language commands.
Cline
Cline is an open-source AI coding agent that operates in your IDE and terminal, enabling developers to edit multiple files, execute commands, run tests, and automate complex tasks with full human approval.
Frequently asked questions
More on agent security
Your audit log says the service account did it
AI agents act with human credentials and leave a record that cannot answer the only question that matters. Ory Agent Security closes the gap.
Ory DX: Build secure apps at the speed of thought, the right way.
Ory DX is the ultimate developer toolkit that unifies AI automation with Ory’s hardened security ecosystem. By seamlessly blending Model Context Protocol (MCP) servers, plugins, CLI, and Ory Elements, it gives developers a conversational, agent-led workflow to develop enterprise-ready identity, access management, and fine-grained permissions.
