An identity revolution is underway

No dark-mode styles — this email renders the same in a dark client.

OpenClaw, Hermes, Grok bot, and Dots act for hours with nobody watching. Enterprise identity was built for people. This release is
how Speakeasy rebuilds it for agents.

͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏
  ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏
  ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏
  ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏
  ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏
  ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏
  ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­͏   ­

NOVEMBER 2026


An identity revolution is underway



Enterprise governance was built around two kinds of actor. People got broad, role-based permissions and the judgement to use them
well. Workflows got narrowly scoped API keys to do one predictable job. Agents fit neither.
At first that didn’t matter much. Agents worked alongside a person who watched each step, so it could reasonably borrow their
credentials. That’s increasingly no longer true. OpenClaw, Hermes, Grok Bot and Dots now run for hours without anyone watching,
making their own decisions. They need the reach of a person, but the limits of a workflow.

https://www.speakeasy.com/product/agent-identity

To see agent identity running against your own IdP, follow the links below

Learn more [https://www.speakeasy.com/product/agent-identity]

Book a demo [https://www.speakeasy.com/book-demo]



https://www.speakeasy.com/product/agent-identity

Every agent session, logged
[https://www.speakeasy.com/changelog/post/2026-10-07-agent-sessions-show-who-an-assistant-acted-as-and-for]. Each one names the
agent, the person it acted for, the surface it ran on, and what it cost.




What an agent's identity has to carry

People’s permissions are built on who they are. Agents’ permissions have to be built on what they’re doing. The same agent can
start a session for one person and one job, then another for someone else entirely, so access tied to the agent itself is either
too broad or too brittle. Speakeasy scopes every session to its task: who created the agent, who’s driving it, what it was started
for, and the call it’s about to make.

https://www.speakeasy.com/product/agent-identity


Who created it

Every agent has an owner [https://www.speakeasy.com/changelog/post/2026-10-07-assistants-get-their-own-agent-identity]: the person
who registered it and is accountable for what it does.


Who is using it

The person driving it right now, signed in through your IdP
[https://www.speakeasy.com/changelog/post/2026-10-12-federated-sign-in-works-with-okta-and-identity-chaining], which is often not
the owner. The record names both.

https://www.speakeasy.com/product/agent-identity

https://www.speakeasy.com/product/agent-identity


Who is using it

The person driving it right now, signed in through your IdP
[https://www.speakeasy.com/changelog/post/2026-10-12-federated-sign-in-works-with-okta-and-identity-chaining], which is often not
the owner. The record names both.

https://www.speakeasy.com/product/agent-identity


What it intends to do

The task it was started for, so permissions can be scoped to that and nothing wider.


What it is about to do

The tool call in front of it, checked against a rule the owning team can read [https://www.speakeasy.com/product/agent-security],
before it runs.

https://www.speakeasy.com/product/agent-identity

https://www.speakeasy.com/product/agent-identity


What it is about to do

The tool call in front of it, checked against a rule the owning team can read [https://www.speakeasy.com/product/agent-security],
before it runs.



https://x.com/speakeasydev

https://join.slack.com/t/speakeasy-dev/shared_invite/zt-1cwb3flxz-lS5SyZxAsF_3NOq5xc8Cjw

https://www.linkedin.com/company/speakeasyapi/



You are receiving this email because you opted in to receive updates from Speakeasy
Speakeasy, 90 New Montgomery St, Suite 700, San Francisco CA 94105
Unsubscribe [https://app.loops.so/unsubscribe/cmw2eq2gk0r8n01vgbvwzg88l/8f2eb1878ae818f9273819af0a6363db0168ed54a02367ed850d9e606d60a7b3ed9a29867a82fa046e544d3f11fe49423466444f59acd5a270ab5da9]

Accession

nse/speakeasy/2026-11-04/6151

From

Speakeasy · sagar@speakeasy.com

Sent

4 November 2026 · 17:00 UTC