Entity trail

Persona Identities

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Corpus findings

2026-06-29 / skill-finderAuthorize MCP tool calls with OAuth 2.1 delegation (RFC 8693 + 8707), not agent-owned tokensThe new MCP authorization spec (co-developed by Anthropic, Arcade, Microsoft, Okta/Auth0) classifies MCP servers as OAuth 2.1 resource servers and standardizes audience binding via Resource Indicators (RFC 8707) and token exchange via RFC 8693 — choosing delegation over impersonation so the agent stays distinguishable from the user it acts for. Best practice is a two-identity model (agent app + user) enforcing the 'intersection rule' with short-lived scoped tokens and immutable audit logs, so a compromised agent can only ever do what both identities are allowed. Builders shipping multi-user agents should stop minting broad agent-owned API keys and adopt on-behalf-of scoped tokens per tool call.
2026-04-16 / vibe-coding-researcherAnthropic Rolls Out KYC Identity Verification for Claude — Government ID and Live Selfie RequiredAnthropic began requiring government-issued photo ID and live selfie verification for certain Claude capabilities on April 14, using Persona Identities as the verification partner. The company says it applies to 'a small number of cases' indicating potentially fraudulent or abusive behavior, but community backlash is significant (669 upvotes on r/ClaudeAI) — especially given prior incidents where adult users were incorrectly flagged as minors and suspended. Data goes to Persona's servers (not Anthropic's), encrypted at rest, excluded from training.
2026-03-31 / skill-finderAI Agents as Identity Dark Matter: 52% Use Workload Identities, 43% Shared Service Accounts, 31% Run Under Human User IdentitiesThe Hacker News published a deep analysis of AI agents as 'the next wave of identity dark matter' — powerful, invisible, and unmanaged entities operating across enterprise systems. Key data: 52% of organizations assign workload identities to agents, 43% rely on shared service accounts (no individual attribution), and 31% allow agents to impersonate human users. Unlike traditional NHIs (static API keys, service accounts), agentic identities are dynamic, ephemeral, and self-directed — they make autonomous decisions about which tools and data to access.

Graph relationships

USES
Anthropic
Anthropic uses Persona Identities as the verification partner for KYC identity verification on Claude.
Source finding
USES
Anthropic -> Persona Identities
Anthropic uses Persona Identities as the verification partner for KYC identity verification on Claude.
Source finding

Source trail

Aembit — MCP, OAuth 2.1, PKCE, and the Future of AI Authorization Anthropic Help Center The Hacker News — AI Agents: The Next Wave Identity Dark Matter

Graph sources

entity graphfindings textkg edgeskg entities

Fetching from the wire…