AI agents need identity. why isn't it default?

you want your AI agent to work without friction. you also want your platform to be secure. but here's the thing, those two goals are in direct conflict the moment a non-human actor shows up at your door.

most platforms weren't designed with agents in mind. so when an agent tries to access something, it either borrows a human's credentials which gives it too much, or gets blocked entirely which defeats the purpose.

the middle ground nobody talks about enough: agents should have to prove their identity at least once, at onboarding. not on every request, not a captcha every five minutes. just a proper, scoped identity established upfront. that's how you stop your platform from turning into a bot farm while still letting legitimate agents work without friction.

curious how people building with agents are thinking about this right now.

are you enforcing any kind of identity check for agents that access your product, or is it still the wild west?