Descope Unveils Cross-App Access for AI Agent Identity

Descope, a customer and agentic identity platform, announced Cross-App Access (XAA) support in its Agentic Identity Hub. This allows enterprises to govern AI agent access through their existing identity providers (IdPs). The feature supports both validation and issuance of ID-JAG tokens, enabling SSO-like login for AI agents accessing MCP servers. It addresses security issues like static API keys and over-permissioned agents. New capabilities include per-organization scope policies, self-service XAA setup, and standards-based token exchange. The Cross-App Access protocol replaces static API keys with short-lived assertions minted by trusted identity providers. It also builds on OAuth 2.1, DCR, CIMD, and consent management support. According to Gravitee research, only 22% of teams treat agents as independent identities. Descope is among the first to support both token validation and issuance. The company was named a Leader in the 2025 Frost Radar for Non-Human Identity Solutions.