Shufti Introduces “Know Your Agent” to Verify AI Agent Identity, Ownership, and Permissions
What Happened — Shufti launched Know Your Agent (KYA), a verification flow that ties autonomous AI agents to a real‑world owner and enforces a policy‑driven permission set before the agent can read data or trigger a transaction. KYA checks the agent’s identity, confirms that a human has authorized the action, and evaluates a time‑bound credential and a trust score. The service supports agents such as Meta Muse, GrokBot and OpenAI Dots, and lets each business define its own mandate (allowed actions, limits, expiry, revocation) that is enforced on every request. Ongoing monitoring flags misuse, helping prevent AI‑agent fraud, chargeback disputes, and unauthorized fund movements.
Why It Matters for Trust & Control Assurance — The solution delivers a concrete control for AI‑governance: verified ownership and permission enforcement for autonomous agents, which maps to the AI governance objectives of the NIST AI RMF.
Who Is Affected — Financial services, digital‑asset platforms, iGaming operators, online marketplaces, SaaS providers, and any organization that allows AI agents to act on its behalf.
Recommended Actions —
- Extend your existing access‑control policies to include AI‑agent mandates and time‑bound credentials.
- Capture and retain verification logs as audit evidence for AI‑risk management frameworks.
Technical Notes — KYA combines agent recognition, spoof‑resistant identity verification, behavioural‑biometrics, and a risk‑based trust score. Each credential is time‑limited and revocable; permissions are enforced via policy checks on every request.