---
title: "Agent identity · Highflame Glossary"
description: "A verifiable, cryptographic credential issued to an agent that carries agent-shaped claims (owner, trust tier, framework, delegation depth) so every action traces back to a named human."
doc_version: "0.1.0"
last_updated: "2026-07-25T03:14:58.002Z"
canonical: "https://www.highflame.com/glossary/agent-identity"
---

[Home](/index.md)·[Glossary](/glossary.md)·Agent identity

# Agent identity

A verifiable, cryptographic credential issued to an agent that carries agent-shaped claims (owner, trust tier, framework, delegation depth) so every action traces back to a named human.

Learn more: [Agent Identity](/learn/ai-agent-identity.md)

Part of [the Agent Control Fabric](/platform.md): Highflame's identity, policy, and enforcement substrate for AI agents.

[Book a demo](/contact.md) [All terms](/glossary.md)

## Keep exploring the glossary.

[

### AI observability

Capturing and querying everything an agent does at runtime, LLM calls, tool calls, file and network activity, tied to identity, so you can ask why something happened and who did it, not just read logs.

Read →](/glossary/ai-observability.md)[

### Attribute-based access control (ABAC)

Authorization decisions keyed to attributes (the agent's claims, owner, trust tier, and delegation depth) rather than shared keys or static roles.

Read →](/glossary/abac.md)[

### Authorization

Deciding whether a given actor is allowed to take a given action. Distinct from authentication (proving who you are); authorization is what an agent may do.

Read →](/glossary/authorization.md)[

### Blast radius

The set of systems and data a compromised agent or credential could reach. Identity-scoped access shrinks it; cascade revocation contains it.

Read →](/glossary/blast-radius.md)[

### Breakout controls

Runtime controls that keep an agent aligned to its mission: containing, redirecting, or stopping it when it veers off course, before the action lands.

Read →](/glossary/breakout-controls.md)[

### Cascade revocation

Revoking a parent credential instantly invalidates everything it delegated, collapsing the affected delegation tree rather than waiting for tokens to expire.

Read →](/glossary/cascade-revocation.md)

## Sitemap

Full site map: [/sitemap.md](https://www.highflame.com/sitemap.md). Machine index: [/sitemap-index.xml](https://www.highflame.com/sitemap-index.xml).