Highlights
Introducing Incode Know Your Agent
The end-to-end trust layer for AI agents built on human identity.
Read more
Introducing TrustGraph
The first trust network built for the agentic era
Read more
Age Center
Understand Incode’s approach to age assurance
Explore the Center
Introducing GovFaceMatch
The first identity solution to match biometrics against DMV records
Read more
3 years in a row named a Leader
A Leader in the 2026 Gartner® Magic Quadrant™ for Identity Verification
Download the report
Your customers already send agents to log in, open accounts, and pay bills. Allow, limit, or block each one, and trace every action back to an identity-verified person.
Partner
“Agents represent a new player in the online landscape, and we need to be able to understand them, verify them, and incorporate them into the systems that we use and rely on every day.”
Kathleen Peters · Chief Innovation Officer, Experian Fraud and Identity, North America
The problem
At login, a customer’s agent and an attacker’s agent look the same.
The way through is to know who sent the agent and what they allowed.
Refuse the customer’s agent, and the payment, the account, or the booking goes to a business that admits it.
of Americans would let a bank’s AI assistant complete at least one financial task for them
US downloads of Meta’s Muse agent in its first 40 days
Attackers’ agents can arrive looking like customers, learn from every rejection, and retry by the thousand.
of fraud attempts expected to be AI-assisted by the end of 2026
Incode Fraud Intelligence
of companies experienced attempted or successful agentic fraud*
KPMG, 2026
*Agentic fraud: fraud that is AI-generated, AI-assisted, or agent-operated.
The product
Incode checks whether a live, verified person stands behind each agent and ties the agent to what that person allowed.
Built with design partners
A verified human
Verified once, live, with consent captured
A live person, physically present
Deepsight
Matched to the government’s own record
GovFaceMatch
A history across the trust network
TrustGraph
How it works
Incode Know Your Agent detects each agent, ties it to a verified person, checks every action, watches for misuse, and keeps every action traceable.
Built on the Incode platform
Incode already answers three questions about every person, and for an AI agent it adds a fourth: who answers for it.
Live
Match
Good actor
Bound
The verified person behind the agent, and what they allowed: scope, amount, duration
Agentic IdentityProtocols such as PAP (Personal Agent Protocol) and MCP (Model Context Protocol) carry the agent’s credential, and Incode adds the verified person they leave open.
Results
Admit the agents your customers send to pay bills and manage accounts, with the same verification you already run on the person.
Incode Know Your Agent blocks any agent with no verified person behind it before it acts and before a loss reaches your books.
Every agent action is tied to the person who authorized it and the mandate they set, so a questioned action has a name.
Why Incode
Incode verifies against government records, owns every model, runs the cross-organization network, and serves a customer base no competitor can assemble.
Verifies a live selfie against the issuing state’s official DMV portrait in real time, without storing biometric data.
Liveness, face, document, and deepfake models are all Incode’s, and Incode retrains them from as few as 20 to 30 samples.
Detect repeat fraud and recognize legitimate customers across participating institutions, without exposing customer data. Up to 53% more fraud detected.
Incode verifies for 8 of the top 9 US telcos, 3 of the top 3 global neobanks, and 4 of the top 5 global marketplaces.
Incode Know Your Agent suits banks, fintechs, marketplaces, AI companies, insurers, and travel businesses that want to admit their customers’ agents without admitting an attacker’s.
Resources
The definition, the attack loop, and how Incode helps stop it, on one page.
Read the explainerHow Incode binds every AI agent to one accountable person, with the use cases.
Read the use caseProving a live person is present, the counterpart to Know Your Agent.
Read the definitionFAQ
The questions buyers ask most about Incode Know Your Agent, answered straight.
Still have questions? Talk to an expertIncode Know Your Agent is a set of five modules that ties every AI agent to a verified human, so a business can work with agents safely. Agent Detection finds the agent, Agentic Identity ties it to a verified person and a mandate, Agent Access Management checks each action, Agent Monitoring flags compromised agents, and Agent Audit keeps every action traceable.
A customer's agent and an attacker's agent present the same credential, device, IP address, and behavior at login, and nothing says who sent them or what they allowed. Several of the largest US banks and brokerages blocked or limited outside agents in October 2026; Incode Know Your Agent supplies the missing signal so they can admit the customer's agent instead.
Know Your Agent (KYA) is a risk-based framework for establishing and maintaining trust in AI agents: defining their identity, binding them to responsible human or organizational principals, and enforcing policy and auditability across all autonomous actions. Incode Know Your Agent is how Incode runs it, and Agentic Identity is the module that ties each agent to a verified person and a mandate.
A mandate is the permission an agent carries: its scope, amount, and duration, which it cannot extend on its own. The business sets the mandate, the customer narrows it, and Incode enforces it at the moment of action; the customer can revoke any agent instantly, pending actions stop, and the record stays.
Agent Detection reads how the session behaves: timing, navigation, and automation patterns no person produces, plus declared agent headers and signed requests. When those signals point to an agent, a live face check shows whether a real person is present, and the business chooses the response: register the agent, step up to the person, or block it.
Yes. Each module runs on its own or as the full suite, so a detection signal you already have can feed the other four. Incode works alongside PAP (Personal Agent Protocol), MCP (Model Context Protocol), A2A (Agent2Agent), AP2 (Agent Payments Protocol), Web Bot Auth, and the card networks' agent programs, adding the verified person each protocol leaves open.
AI agent identity verification checks whether a real, verified person stands behind an AI agent and what that person allowed it to do. Incode Know Your Agent runs it with a live face check from Deepsight, a match to the issuing state's official DMV portrait through GovFaceMatch, and the person's history across the TrustGraph network.
Banks, fintechs, and payments companies lead, followed by marketplaces and the AI companies that build agents, with travel, insurance, and gaming using the same checks. In each one, Incode Know Your Agent lets customers' agents in within a mandate and keeps out agents with no verified human behind them.