Entro Security AGA: AI Agent NHI Inventory Maps Every Agent Runtime to Its OAuth Scopes, Secrets, and MCP Tool Calls

Help Net Security·high signal

Launched March 18 2026, Entro's Agentic Governance and Administration (AGA) addresses a gap traditional IAM tools miss: AI agents authenticate as Non-Human Identities (API keys, service accounts, OAuth tokens) that bypass human-login audit trails. AGA uses EDR integrations to discover locally running agent runtimes on developer workstations, natively connects to agent foundries (AWS Bedrock, Copilot Studio) to map every agent to its NHIs and OAuth scopes, and enforces MCP policies — logging which tools were invoked, blocking unsanctioned MCP targets, and generating full audit trails of allowed/denied agent actions.