Agent Identity: The Missing Layer in API Security

Name: Agent Identity: The Missing Layer in API Security
Uploaded: 2026-11-11T09:11:10.841Z
Duration: 30 min
Description: Why OAuth client registration breaks down for AI agents, and how the Client ID Metadata Document spec gives agents a verifiable identity.

AI agents are calling your APIs, but neither your API gateway nor your authorization server can tell which agent made the call. In this Nordic APIs Summit 2026 talk, Jonas Iggbom of Curity explains the emerging IETF draft for OAuth Client ID Metadata Documents, how it enables dynamic client identity without a registry, why proving possession of a private key matters more than knowing a URL, and what the standard still leaves unsolved for enterprise agentic systems.