Highlights
Introducing TrustGraph Understand Incode’s approach to age assurance Introducing GovFaceMatch 3 years in a row named a Leader
01/04
01/04
Agentic Identity (KYA)

Know which human is behind every AI agent

Know Your Agent (KYA) confirms which verified human stands behind an AI agent, and Incode keeps every action the agent takes accountable to that person.

The challenge

AI agents will soon outnumber humans online

AI agents log in and move money on surfaces built for people, and existing checks can treat them as human.

OAuth, API keys, and passkeys only confirm access; the authorizing human and the agent's limits can stay unknown.

33%

of enterprise software will embed agentic AI by 2028, up from under 1% in 2024

Gartner, 2025

+55%

year-over-year growth in digital injection attacks

Incode data, 2025 to 2026

60%+

of fraud attempts expected to be AI-assisted by the end of 2026

Incode

4.5x

more effective AI-generated phishing versus human-written (54% versus 12% click-through)

Microsoft, 2026

How it works

From verified human to verified agent

Learn more: Agentic IdentityDeepsightGovMatchTrustGraph

Why Incode

The trust layer for the agentic web

Our platform verifies the human behind every agent and keeps scoring risk as agent volume scales.

Explore the platform

A verified owner behind every action

OAuth and passkeys authenticate the agent; Incode verifies the human owner and binds every action to that person.

Verification that resists spoofing

Deepsight passed iBeta's Level 3 presentation-attack test (0% error rate); Purdue University ranked it first among nine commercial systems.

A privacy-preserving trust network

TrustGraph exchanges risk signals across human and agent populations, and GovMatch™ anchors each owner in government records.

The same accountable owner on every surface and protocol

One verified human can run many agents on web, app, MCP (Model Context Protocol), and A2A (agent-to-agent) surfaces.

Use cases

One verified identity across every agentic action

Know Your Agent (KYA) keeps a verified human behind every agent step in fintech, SaaS, healthcare, and legal services.

Agent onboarding

Verify the human owner once, before an agent is granted any credentials or access.

Sensitive action step-up

Trigger a live re-verification when an agent reaches a high-risk action, like moving money or changing account access.

Multi-agent oversight

Track every agent one verified human runs, keeping each one traceable to the same accountable owner.

Agent-to-agent transactions

Carry verified owner identity across MCP (Model Context Protocol) and A2A (agent-to-agent) surfaces as well as human-facing apps.

Incident response and audit

Trace any agent action back to a real, verified person for a regulator, a court, or an internal investigation.

Verified proof

Global enterprises rely on the Incode platform

Citi
Chime
TikTok
FanDuel
BetMGM
AT&T
Experian
Equifax

7.1B+

trust checks run on the Incode platform

99.9%

deepfake detection

190+

countries and territories covered

35+

in-house built ML models

“Incode gives us the extra layer of confidence we need to fight modern fraud, without slowing down the experience for our customers. With Incode's tech on our side, we can spot suspicious activity faster and stay one step ahead of growing digital fraud challenges.”

Customer Ops Executive · MaxBet

FAQ

Frequently asked questions

Still have questions? Talk to an expert
What is Know Your Agent (KYA)?

Know Your Agent (KYA) is a risk-based framework for trusting AI agents: it defines each agent's identity, binds it to a responsible human, and enforces policy and auditability across every autonomous action.

What is agentic identity?

Agentic identity is the verified digital identity of an autonomous AI agent, covering who operates it, what it may do, and what it has done; Incode's Agentic Identity product establishes it.

How is Know Your Agent (KYA) different from OAuth, API keys, or passkeys?

OAuth, API keys, and passkeys confirm that something has valid access, while Know Your Agent (KYA) verifies the human owner behind it and binds the agent's actions and permissions to that person.

How does Incode verify the human behind an AI agent?

Before an agent receives credentials, Deepsight checks that a real person is present, GovMatch™ matches that person to government records, and Incode binds the verified identity and approved actions into a scoped credential.

What happens when an AI agent reaches a high-risk action?

Under Know Your Agent (KYA), a high-risk action such as moving money or changing account access triggers a live step-up with the human owner, while low-risk actions flow on the agent's scoped credential.

Who is accountable when an AI agent does something wrong?

The verified human owner is accountable: Know Your Agent (KYA) keeps an auditable chain from every agent action back to that person, since regulators and courts are unlikely to accept “the AI did it.”

Does Know Your Agent (KYA) work with MCP, A2A, and OAuth-authenticated agents?

Yes, Incode layers verified owner identity over OAuth on web, app, MCP (Model Context Protocol), and A2A (agent-to-agent) surfaces, through platform integrations or SDKs.

How do Know Your Agent (KYA) and Know Your Human (KYH) relate to agentic fraud?

Know Your Human (KYH) proves a real person is present, Know Your Agent (KYA) binds a legitimate agent to that person, and together they help separate a customer's agent from agentic fraud.

Confirm every agent action leads back to a human

See how Know Your Agent (KYA) binds AI agent actions to accountable, verified people.