Agent governance at scale
Hundreds of agents, one source of truth. Every identity verified, every action audited.
The Problem
Enterprise AI deployments are growing from single agents to fleets of specialized agents. Without centralized identity management, you can't answer: how many agents do we have? What can each one do? Who authorized them? What have they done?
The Solution
IDProva Cloud provides a managed registry as the central identity authority for your entire agent fleet. Combine with your existing IdP via the OIDC bridge (Okta / Entra ID / Auth0 / generic OIDC) for human operators, with exportable audit trails for your compliance team. SIEM streaming and anomaly detection are on the roadmap.
Key capabilities
Central Agent Registry
Every agent registered with a W3C DID. Searchable, queryable, always up to date.
Policy Enforcement
8 constraint types: rate limits, IP allowlists, geofencing, delegation depth, time windows, and more.
Compliance Mapping
Protocol controls mapped to NIST 800-53 and the Australian ISM. Export the audit trail as evidence for your compliance team.
SIEM Integration (roadmap)
Stream verification events and scope violations to Splunk, Datadog, or Sentinel. On the roadmap for IDProva Cloud.
# Issue a scoped, time-boxed enterprise DAT
$ idprova dat issue \
--issuer "did:aid:acme.com:admin" \
--subject "did:aid:acme.com:finance-bot" \
--scope "api:service:billing:read" \
--expires-in "8h" \
--key admin.key
# Inspect scope, expiry, and any token constraints
$ idprova dat inspect <token>
# Scope, expiry, rate limits, IP allowlists and
# delegation depth are enforced at verification