{"slug": "identity-as-the-moat-descope-embeds-mcp-native-auth-into-the-gateway-layer", "title": "Identity as the Moat: Descope Embeds MCP-Native Auth into the Gateway Layer", "summary": "Descope released Agentic Identity Hub 3.0 on October 15, becoming the first Non-Human Identity vendor to embed Model Context Protocol native authorization directly into the gateway layer, integrating with the Linux Foundation's open-source AAIF agentgateway donated by Solo.io. The Agentic Governance Suite enforces owner, purpose, access and audit trail requirements behind every agent, and Descope co-founder and CEO Slavik Markovich said the release \"puts an owner, scoped access, policy controls, and audit trail behind every agent.\" The launch follows ServiceNow AI Passport and Postman Fabric Gateway in the same week, as Gartner predicts the average Fortune 500 enterprise will manage over 150,000 agents by 2028 while only 13% of organizations believe they have the necessary AI governance in place.", "body_md": "The infrastructure supporting autonomous agents is undergoing a fundamental shift as identity verification moves from a peripheral security check to a core gateway component. With the release of [Agentic Identity Hub 3.0](https://www.descope.com/blog/post/agentic-identity-hub-3) on October 15, Descope has become the first Non-Human Identity (NHI) vendor to embed Model Context Protocol ([MCP](https://forkast.news/glossary/model-context-protocol-mcp/)) native authorization directly into the gateway layer. This development effectively captures the ‘moat’ of agent infrastructure by moving governance into the flow of traffic.\n\nBy integrating with the [AAIF agentgateway](https://agentgateway.dev)-an open-source project donated by Solo.io to the Linux Foundation-Descope enables organizations to enforce security policies at the point of entry. This native integration plugs directly into any Policy Enforcement Point (PEP), including gateways, MCP servers, and APIs. In this architecture, the governance layer is the product. The runtime is the utility.\n\nThe Agentic Governance Suite (AGS) is central to this transition. It enforces owner, purpose, access, and audit trail requirements behind every agent. As Slavik Markovich, co-founder and CEO of Descope, noted: “At the end of the day, internal or external-facing AI systems have the same critical need for delegated access to resources. Agentic Identity Hub 3.0 puts an owner, scoped access, policy controls, and audit trail behind every agent, so organizations can continue adopting AI at the pace they have been without any identity bottlenecks or blindspots.”\n\nThis release completes a three-vendor week that includes the [ServiceNow AI Passport](https://forkast.news/servicenow-bets-the-credential-is-the-governance-layer-not-the-policy/) and the [Postman Fabric Gateway](https://forkast.news/the-biggest-api-platform-just-bet-its-future-on-protocol-agnostic-agent-governance/). This convergence signals a market shift: identity and governance are increasingly treated as the product itself, rather than secondary policy considerations. The delta between this week’s activity and previous milestones, such as the [AGNTCon keynotes](https://forkast.news/eight-days-out-agntcon-keynote-assignments-map-the-agent-control-plane-playbook/), is the literal embedding of identity vendors into the gateway architecture.\n\nGartner predicts that the average Fortune 500 enterprise will manage over 150,000 agents by 2028. Currently, only 13% of organizations believe they have the necessary AI governance in place to manage this volume. Scale is the forcing function. Without robust identity frameworks, enterprises face significant operational blindspots as their agent fleets grow.\n\nDescope’s approach leverages the emerging ID-JAG IETF standard for identity assertion, allowing for the issuance and validation of tokens that preserve the link between the agent, the user, and the tenant. By embedding these controls into the gateway, Descope addresses the friction that often accompanies scaling agentic systems. The control plane is consolidating around the gateway, and the identity layer is moving to occupy that space. Governance is the new moat.", "url": "https://wpnews.pro/news/identity-as-the-moat-descope-embeds-mcp-native-auth-into-the-gateway-layer", "canonical_source": "https://forkast.news/identity-as-the-moat-descope-embeds-mcp-native-auth-into-the-gateway-layer/", "published_at": "2026-10-15 21:23:32+00:00", "updated_at": "2026-10-15 21:26:39.021397+00:00", "lang": "en", "topics": ["ai-agents", "agent-protocols", "ai-policy", "ai-infrastructure"], "entities": ["Descope", "Agentic Identity Hub 3.0", "Model Context Protocol", "AAIF agentgateway", "Solo.io", "Linux Foundation", "Slavik Markovich", "ServiceNow"], "also_reported_by": [], "alternates": {"html": "https://wpnews.pro/news/identity-as-the-moat-descope-embeds-mcp-native-auth-into-the-gateway-layer", "markdown": "https://wpnews.pro/news/identity-as-the-moat-descope-embeds-mcp-native-auth-into-the-gateway-layer.md", "text": "https://wpnews.pro/news/identity-as-the-moat-descope-embeds-mcp-native-auth-into-the-gateway-layer.txt", "jsonld": "https://wpnews.pro/news/identity-as-the-moat-descope-embeds-mcp-native-auth-into-the-gateway-layer.jsonld"}}