AssureSwarm

standard

NIST Agent Identity (draft, Feb 2026)

NIST NCCoE: Software and AI Agent Identity and Authorization

Record JSON · Open in map · Data retrieval guide

Catalog revision: 24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028. A connection does not establish full coverage.

Attributes

category
nist-ai-agent-identity
authority
guidance

Details

authority
guidance
version
February 2026 draft concept paper
publicationDate
2026-02-05
amendmentState
Initial concept paper; comments closed 2026-04-02; project reviewing comments as of 2026-09-10
effectiveDate
Not provided
source_url
https://www.nccoe.nist.gov/sites/default/files/2026-02/accelerating-the-adoption-of-software-and-ai-agent-identity-and-authorization-concept-paper.pdf
reviewed_at
2026-09-10
note
Draft concept paper seeking input on a proposed NCCoE project. The seven selected topics below summarize questions and areas of exploration, not final requirements or a completed implementation guide. NIST-AGI identifiers are local catalog references, not NIST control numbers. The project focuses on enterprise agents; external agents from untrusted sources are outside its initial scope. The NIST AI Agent Standards Initiative, launched 2026-02-17, is a standards-development program rather than a certifiable standard: https://www.nist.gov/artificial-intelligence/ai-agent-standards-initiative
propositions
  • id
    NIST-AGI-01
    title
    Distinct agent identities and identity boundaries
    sourcePages
    Concept paper pp. 4, 6: Identification; Areas of Interest
  • id
    NIST-AGI-02
    title
    Agent authentication and credential lifecycle
    sourcePages
    Concept paper pp. 4, 7: Authentication; Relevant Standards and Guidelines
  • id
    NIST-AGI-03
    title
    Context-sensitive authorization and least privilege
    sourcePages
    Concept paper pp. 4, 6: Authorization; Areas of Interest
  • id
    NIST-AGI-04
    title
    Delegated authority and human accountability
    sourcePages
    Concept paper pp. 4, 6: Authorization; Access Delegation
  • id
    NIST-AGI-05
    title
    Verifiable agent action logs and authorization traceability
    sourcePages
    Concept paper pp. 4, 6: Auditing and non-repudiation; Logging and Transparency
  • id
    NIST-AGI-06
    title
    Prompt-injection prevention and limits on resulting harm
    sourcePages
    Concept paper p. 4: Prompt Injection prevention and mitigation
  • id
    NIST-AGI-07
    title
    Prompt provenance and data-flow tracking
    sourcePages
    Concept paper p. 6: Tracking Data Flows of an AI System

Source

Read the source

Connections