Unverified50% confidenceFactExact time
ID-JAG can embed claims such as act (actor) or may_act in the token payload to identify which principal authorized the Agent and on behalf of which user it is acting.
1
Sources
50%
Confidence
Long-term
Relevance
9/24/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedThe ID-JAG flow involves an application first obtaining an identity assertion from an identity provider, then using that assertion to exchange for an access token targeting a specific resource server, with enterprise authorization policies enforced during the exchange.70% similarUnverifiedVS Code requires users to explicitly authorize the Agent to execute system commands through a pop-up permission notification.69% similarUnverifiedIn the ID-JAG model, enterprise administrators pre-configure which applications can access which resources, under what conditions, and with what scope, and the identity provider issues tokens containing authorization assertions based on these pre-set policies.67% similarUnverifiedThe identity layer ensures that every call made by every Agent has a verifiable identity attribution, which is a prerequisite for enforcing access control policies.64% similarUnverifiedWhen designing an identity system, one should first determine whether the problem being solved involves human access or Agent action, and then decide on the token usage and accompanying infrastructure.62% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/947595API
curl https://kongchang.com/api/v1/knowledge/claims/947595MCP
get_claim(id=947595)