top of page
A07
Agent Identity & Authorisation
Human-facing authentication artefacts (session cookies, personal API keys, MFA-backed tokens) are not used by agents.
WHAT IT ADDRESSES
Agent inherits the full privilege of a human account.
VERIFICATION METHOD
Credential type audit against the identity register.
NIST NCCoE; OWASP T&M
bottom of page