Delegated sign-in for personal AI agents
Let personal AI agents shop, book, and manage accounts for your customers. Envoy gives each agent its own identity, scoped permissions, and customer approval for sensitive actions.
Accept agents through the Personal Agent Protocol without implementing the spec yourself.
Keep the customer and the agent separate in every session and log entry.
Add agent sign-in to your existing auth with no rebuild.
These innovative consumer apps already run Descope Envoy
Your sign-in is built for humans…so far
Personal agents are already browsing your site, comparing options, and placing orders. See how Envoy lets them in on your terms.
A customer’s agent just showed up to your site. Now what?
Block the agent
Blocking agents also blocks the customers using them. Those orders and bookings go to a competitor who lets agents in.
Let the agent pose as the customer
The agent logs in as the customer, which means your logs can’t tell them apart when an order is disputed or flagged.
Accept the agent with delegated access
Envoy gives every agent its own identity, permissions you control, and an approval path back to the customer.
A front door built for personal agents
Poppy support
Accept agent traffic without implementing the Poppy draft yourself. Descope handles discovery, sessions, and all three Poppy sign-in types.
Zero-setup agent identification
Identify agents through Client ID Metadata Documents, so compliant agents can sign in without a manual setup step on your side.
Agent-bound sessions
Bind session tokens to the agent’s key with Demonstrated Proof of Possession (DPoP), so a copied token can’t be used by anyone else.
Granular agent permissions
Define exactly what an agent can and can’t do on a customer’s account with Rich Authorization Requests (RAR).
Out-of-band user approval
Send sensitive actions to the customer’s phone for approval with Client-Initiated Backchannel Authentication (CIBA).
Works with your current auth
Add Envoy to the customer identity stack you already run. No migration or second login system needed.
Delegated access from sign-in to checkout
Idenify
Know an agent from a human
Delegation on the record. Every token and log entry shows the customer and the agent acting for them as separate identities.
Verified agents. Confirm which agent is making a request before you issue it a session.
Revoke the agent, keep the customer. Cut off one agent’s access without signing the customer out.
Control
Set the rules for what agents can do
Scoped to the task. Let a shopping agent browse the catalog and place orders while account settings and payment methods stay off limits.
Time-boxed access. Decide how long any elevated access lasts.
Standards-based permission requests. Agents ask for exactly what they need through RAR, so permissions are explicit from the first request.
Approve
Let customers sign off on sensitive actions
Approval from their phone. An agent that finds a flight overnight can hold the fare and send the airline, times, and total to the customer to approve the next morning.
Out of band. Approval happens on the customer’s own device, outside the agent’s session.
Your call on what needs approval. Choose which actions trigger a request, from purchases to donations.
“Every donation on GoFundMe is an act of trust, so when an agent acts for someone, we need to know exactly who is giving and who is acting for them. Envoy will keep the person and the agent distinct in every session, limit what an agent can do, and ask the user to approve donations from their phone.”
Arnie Katz, Chief Product and Technology Officer
FAQs about Envoy
Ready for liftoff?
If you’ve seen all you need to see, sign up and get started with Descope. If you'd like a demo, meet with our auth experts.
