Use cases
Ten ways machine and agentauthority goes wrong.
Concrete scenarios from orphaned service accounts to autonomous agents: what happens, why it keeps happening and what the evidence looks like.
Non-human identities
Service accounts, workloads, keys and pipelines
Five scenarios where identities created by people outlive, outgrow or escape the controls that were built for people.
Explore NHI securityOrphaned NHI
A service account outlives the engineer who created it and keeps authenticating to production every night
Read the use caseOverprivileged NHI
A workload identity holds administrator rights and has used six API operations in eleven months
Read the use caseExposed Credential
An API key surfaces in a repository, a chat thread and a wiki, and rotation alone does not answer what it could reach
Read the use caseHidden M2M Access
A reporting service reaches customer data through a two-hop role chain that per-account policy reviews never see
Read the use caseCross-Environment Access
A staging deploy identity was wired into production to save a week and can now destroy it
Read the use caseAI agents
Agents, tools, delegation and autonomous action
Five scenarios where inherited credentials, untrusted content and delegation turn a helpful agent into an unauthorized actor.
Explore AI agent securityShadow AI
A weekend agent connected to an MCP server runs for months on a developer's own credentials
Read the use caseAgent Overprivilege
A scheduling assistant inherits every OAuth scope its human holds, including send-as mail and file download
Read the use casePrompt Injection
A support ticket instructs an agent to export customer records; authorization outside the model refuses
Read the use caseHigh-Impact Action
A cleanup agent decides a production backup bucket is stale and calls delete with nobody in the loop
Read the use caseMulti-Agent Trust
A read-only agent gets a privileged agent to flip a production flag by routing the request through a coordinator
Read the use caseSee these scenarios on your own identities.
Start with a scoped assessment of your non-human identities, or walk through the scenarios the platform supports in a demo on sample data.