--- title: Agentic identity: modeling agents to keep users in control description: Ramp's engineering team describes how they built 'agent identity' — a new primitive for letting AI agents act on behalf of human users within their financial... canonical: https://daily.dev/posts/agentic-identity-modeling-agents-to-keep-users-in-control-aq7csh0p7 twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Agentic identity: modeling agents to keep users in control | daily.dev og:description: Ramp's engineering team describes how they built 'agent identity' — a new primitive for letting AI agents act on behalf of human users within their financial... og:url: https://daily.dev/posts/agentic-identity-modeling-agents-to-keep-users-in-control-aq7csh0p7 og:image: https://api.daily.dev/og/posts/aq7Csh0p7.png og:image:alt: Agentic identity: modeling agents to keep users in control og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Agentic identity: modeling agents to keep users in control **[Ramp Engineering](https://daily.dev/sources/ramp_eng)** · 8 min read · 0 upvotes · 0 comments ## Summary Ramp's engineering team describes how they built 'agent identity' — a new primitive for letting AI agents act on behalf of human users within their financial platform. The system introduces Agent Keys, attribution tracking (e.g., 'Approved by Sarah via Codex'), permission scoping bounded by the sponsor's existing RBAC role, and lifecycle controls including expiration and revocation. Rather than issuing raw API keys to agents, they implemented OAuth2-PKCE so Agent Keys themselves carry no authentication power — only short-lived JWTs do. The post explains why they started with an 'On Behalf Of User' (OBOU) model rather than standalone agents: it preserves human accountability, simplifies compliance, and reuses existing auditing infrastructure. Standalone agents acting as virtual employees are planned for the future. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [AI Agent Identity: How to Authenticate and Govern AI Agents](https://daily.dev/posts/ai-agent-identity-how-to-authenticate-and-govern-ai-agents-pii52p4wl) · Security Boulevard · 0 upvotes · 0 comments - [AI Agents Are Not Users: Building an AI Agent Identity Model](https://daily.dev/posts/ai-agents-are-not-users-building-an-ai-agent-identity-model-0gmsbkuop) · Auth0 · 1 upvotes · 0 comments - [What Is Agentic Identity?](https://daily.dev/posts/what-is-agentic-identity--tmprpbz75) · Descope · 0 upvotes · 0 comments - [3 Core Pillars of AI Agent Access Control](https://daily.dev/posts/3-core-pillars-of-ai-agent-access-control-epxjjvtqr) · Nordic APIs · 1 upvotes · 0 comments - [Agent Auth: A lawyer’s day in court](https://daily.dev/posts/agent-auth-a-lawyer-s-day-in-court-cpredp2lo) · CNCF · 1 upvotes · 0 comments --- Tags: [#mcp](https://daily.dev/tags/mcp), [#agentic-ai](https://daily.dev/tags/agentic-ai) [View this post on daily.dev](https://daily.dev/posts/agentic-identity-modeling-agents-to-keep-users-in-control-aq7csh0p7) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Agentic identity: modeling agents to keep users in control","url":"https://daily.dev/posts/agentic-identity-modeling-agents-to-keep-users-in-control-aq7csh0p7","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/agentic-identity-modeling-agents-to-keep-users-in-control-aq7csh0p7"},"datePublished":"2026-07-08T19:14:47.400Z","dateModified":"2026-07-08T19:15:24.762Z","description":"Ramp's engineering team describes how they built 'agent identity' — a new primitive for letting AI agents act on behalf of human users within their financial...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/0a35f01a520a823373531c4e05dac383?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/0a35f01a520a823373531c4e05dac383?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Ramp Engineering","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Ramp Engineering","logo":"https://media.daily.dev/image/upload/s--4x5H_pLU--/f_auto/v1704280953/logos/ramp.jpg","url":"https://daily.dev/sources/ramp_eng"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/agentic-identity-modeling-agents-to-keep-users-in-control-aq7csh0p7","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"mcp,agentic-ai","timeRequired":"PT8M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Ramp Engineering","item":"https://daily.dev/sources/ramp_eng"},{"@type":"ListItem","position":3,"name":"Agentic identity: modeling agents to keep users in control"}]} ```