A Framework For Securing AI Agent Credentials Through Systematic Inventory And Governance
Help Net Security, Friday, September 4th, 2026
A Five-Part Inventory for Your AI Agent Credentials
Roy Katmor, CEO of Orchid, discusses how AI agents accumulate credentials that typically escape organizational review processes.
As enterprises deploy agents across HR, identity providers, ticketing, and payroll systems, each connection receives OAuth tokens, API keys, or service accounts with expanding permissions. Katmor advocates treating agents as applications and inventorying five elements: owner and purpose, accessible tools, credentials used, effective authority, and runtime behavior.
This approach enables teams to align approved intent with observed behavior and implement targeted controls, including emergency kill switches for compromised agents.