Agent identity and access: 9 companies ranked

Companies selling authentication, authorization and credentials for AI agents and MCP servers, in SalesBook agentic-sector rank order. Every company has a profile with dated public sources and a live check of its agent interfaces (MCP, llms.txt). Ranks use the published SalesBook method; tell us who is missing.

• Aembit#22Identity and access management for AI agents and non-human workloads, issuing short-lived credentials by policy instead of long-lived secrets.
  MCP connector: nollms.txt: yes
• Permit.io#23Fine-grained authorization as a service for apps, APIs and AI agents, including an MCP gateway that applies RBAC/ABAC/ReBAC to agent tool calls.
  MCP connector: nollms.txt: yes
• Scalekit#33Auth stack for AI agents: MCP gateway with per-user auth and scoped tool access, OAuth 2.1 for MCP servers, and SSO/SCIM for B2B apps.
  MCP connector: yesllms.txt: yes
• Clerk#50Authentication and user management for developers' apps, including B2B multi-tenancy, enterprise SSO and OAuth consent for agents acting for users.
  MCP connector: yesllms.txt: yes
• Descope#59Customer and agentic identity platform: no-code auth flows for users, partners, AI agents and MCP servers.
  MCP connector: yesllms.txt: yes
• Keycard#72Runtime identity and authorization for AI agents: per-agent identities, scoped short-lived credentials and policy, sold to enterprises.
  MCP connector: nollms.txt: yes
• Defakto#76Non-human IAM platform built on SPIFFE that issues short-lived runtime identities to workloads, pipelines and AI agents in place of static secrets.
  MCP connector: nollms.txt: no
• Clutch Security#100Enterprise security platform for non-human identities, AI agents and secrets: discovery, posture, guardrails and threat detection.
  MCP connector: yesllms.txt: no
• Token Security#106Identity security platform that discovers, governs and enforces least-privilege access for enterprise AI agents and non-human identities.
  MCP connector: nollms.txt: yes