--- title: Agentic Platform: Open-Sourcing the Agentic Identity Broker description: Zalando has open-sourced the Agentic Identity Broker, an MIT-licensed component that lets AI agents act on behalf of users across third-party systems without... canonical: https://daily.dev/posts/agentic-platform-open-sourcing-the-agentic-identity-broker-qahncp1tu twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Agentic Platform: Open-Sourcing the Agentic Identity Broker | daily.dev og:description: Zalando has open-sourced the Agentic Identity Broker, an MIT-licensed component that lets AI agents act on behalf of users across third-party systems without... og:url: https://daily.dev/posts/agentic-platform-open-sourcing-the-agentic-identity-broker-qahncp1tu og:image: https://api.daily.dev/og/posts/QAhnCP1Tu.png og:image:alt: Agentic Platform: Open-Sourcing the Agentic Identity Broker og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Agentic Platform: Open-Sourcing the Agentic Identity Broker **[Zalando](https://daily.dev/sources/zalando)** · 9 min read · 1 upvotes · 0 comments ## Summary Zalando has open-sourced the Agentic Identity Broker, an MIT-licensed component that lets AI agents act on behalf of users across third-party systems without ever holding the users' provider tokens. Built while developing Zalando's own agentic platform on Kubernetes with kagent, agentgateway, and kro, the broker addresses agentic identity, delegation, consent, and token exchange using standards such as OAuth 2.0 Token Exchange (RFC 8693), Protected Resource Metadata (RFC 9728), Cross-App Access, and SPIFFE. Its model centers on permission sets, grants, and user sessions, with a central consent screen expressing business capabilities rather than raw OAuth scopes. At runtime, agentgateway and the broker validate tokens and exchange them for provider tokens without ever exposing those tokens to agents. Future work includes integrating Open Policy Agent for fine-grained tool authorization, central tool approvals, CIBA for high-risk transactions, and SPIFFE-based identity separation. The project is available on GitHub with documentation at agenticidentitybroker.dev. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### What is the Agentic Identity Broker and how does it let AI agents access third-party systems? The Agentic Identity Broker is an MIT-licensed, open-source component built by Zalando that lets AI agents act on behalf of users across third-party systems without ever holding the users' provider tokens. It records delegated permissions, holds encrypted third-party sessions, and exchanges tokens on demand when an agent calls a tool, using OAuth 2.0 token exchange rather than giving agents direct provider credentials. _Teams designing secure agent-to-service access can track broker patterns like this one on daily.dev._ ### How does the Agentic Identity Broker structure consent for AI agent permissions? The broker's delegation model uses three objects: permission sets, which are administrator-defined groups of OAuth 2.0 scopes named in business terms like 'reading repositories'; grants, which are revocable, optionally time-limited delegations from a user to an agent; and user sessions, which hold encrypted provider tokens shared across all agents a user has delegated to. Consent screens present these business capabilities instead of raw OAuth scope strings. _Anyone weighing consent models for agent permissions can follow this design reasoning on daily.dev._ ### What technology stack does Zalando use to build its agentic AI platform on Kubernetes? Zalando's agentic platform runs on Kubernetes and combines kagent and agentgateway with the Agentic Identity Broker for delegated access. Kro translates Kubernetes custom resource definitions for Agents and MCP servers into kagent and agentgateway configuration, and Open Policy Agent is integrated into agentgateway via its ExtProc extension point for tool-call authorization. _Platform engineers assembling an agentic AI stack can compare component choices like these on daily.dev._ ## Similar posts on daily.dev - [Agentic Engineering at Zalando: a snapshot](https://daily.dev/posts/agentic-engineering-at-zalando-a-snapshot-yp84swye3) · Zalando · 2 upvotes · 0 comments - [AI Agent Identity and Permission Challenges: How Uber and Auth0 Are Rethinking Access Control](https://daily.dev/posts/ai-agent-identity-and-permission-challenges-how-uber-and-auth0-are-rethinking-access-control-fhkr4tfqi) · InfoQ · 0 upvotes · 0 comments - [Agent Auth: A lawyer’s day in court](https://daily.dev/posts/agent-auth-a-lawyer-s-day-in-court-cpredp2lo) · CNCF · 1 upvotes · 0 comments - [Identity Security Vendors for AI Agents \| Kovrr](https://daily.dev/posts/identity-security-vendors-for-ai-agents-kovrr-8nznywzru) · Security Boulevard · 1 upvotes · 0 comments --- Tags: [#ai-agents](https://daily.dev/tags/ai-agents), [#kubernetes](https://daily.dev/tags/kubernetes), [#mcp](https://daily.dev/tags/mcp) [View this post on daily.dev](https://daily.dev/posts/agentic-platform-open-sourcing-the-agentic-identity-broker-qahncp1tu) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Agentic Platform: Open-Sourcing the Agentic Identity Broker","url":"https://daily.dev/posts/agentic-platform-open-sourcing-the-agentic-identity-broker-qahncp1tu","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/agentic-platform-open-sourcing-the-agentic-identity-broker-qahncp1tu"},"datePublished":"2026-09-25T15:15:14.760Z","dateModified":"2026-09-25T15:15:41.977Z","description":"Zalando has open-sourced the Agentic Identity Broker, an MIT-licensed component that lets AI agents act on behalf of users across third-party systems without...","image":"https://media.daily.dev/image/upload/s--HRgLpUt6--/f_auto/v1722860399/public/Placeholder%2003","thumbnailUrl":"https://media.daily.dev/image/upload/s--HRgLpUt6--/f_auto/v1722860399/public/Placeholder%2003","isAccessibleForFree":true,"articleSection":"Zalando","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Zalando","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/94640378400546638ce8f6311afa73e3","url":"https://daily.dev/sources/zalando"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/agentic-platform-open-sourcing-the-agentic-identity-broker-qahncp1tu","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":1},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"ai-agents,kubernetes,mcp","timeRequired":"PT9M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Zalando","item":"https://daily.dev/sources/zalando"},{"@type":"ListItem","position":3,"name":"Agentic Platform: Open-Sourcing the Agentic Identity Broker"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/agentic-platform-open-sourcing-the-agentic-identity-broker-qahncp1tu#faq","mainEntity":[{"@type":"Question","name":"What is the Agentic Identity Broker and how does it let AI agents access third-party systems?","acceptedAnswer":{"@type":"Answer","text":"The Agentic Identity Broker is an MIT-licensed, open-source component built by Zalando that lets AI agents act on behalf of users across third-party systems without ever holding the users' provider tokens. It records delegated permissions, holds encrypted third-party sessions, and exchanges tokens on demand when an agent calls a tool, using OAuth 2.0 token exchange rather than giving agents direct provider credentials. Teams designing secure agent-to-service access can track broker patterns like this one on daily.dev."}},{"@type":"Question","name":"How does the Agentic Identity Broker structure consent for AI agent permissions?","acceptedAnswer":{"@type":"Answer","text":"The broker's delegation model uses three objects: permission sets, which are administrator-defined groups of OAuth 2.0 scopes named in business terms like 'reading repositories'; grants, which are revocable, optionally time-limited delegations from a user to an agent; and user sessions, which hold encrypted provider tokens shared across all agents a user has delegated to. Consent screens present these business capabilities instead of raw OAuth scope strings. Anyone weighing consent models for agent permissions can follow this design reasoning on daily.dev."}},{"@type":"Question","name":"What technology stack does Zalando use to build its agentic AI platform on Kubernetes?","acceptedAnswer":{"@type":"Answer","text":"Zalando's agentic platform runs on Kubernetes and combines kagent and agentgateway with the Agentic Identity Broker for delegated access. Kro translates Kubernetes custom resource definitions for Agents and MCP servers into kagent and agentgateway configuration, and Open Policy Agent is integrated into agentgateway via its ExtProc extension point for tool-call authorization. Platform engineers assembling an agentic AI stack can compare component choices like these on daily.dev."}}]} ```