Descope launches Envoy to let consumer apps accept personal AI agents as users. Customer and agentic identity platform company Descope Inc. today launched Envoy, a service that lets consumer websites and apps accept personal artificial intelligence agents acting for their customers without rebuilding how people sign in. Agents arriving through Envoy get an identity of their own, separate from the customer's. The launch goes after a choice consumer businesses have been stuck with since agents such as Meta Platforms Inc.'s Muse started shopping and paying for things on people's behalf. Amazon.com Inc. blocked Muse from its store in September, saying the agent did not identify itself as one when placing orders, and JPMorgan Chase & Co. moved a month later to keep outside agents away from customer bank accounts. Descope expects blocking will get harder to maintain as more customers do their shopping through an agent. The alternative, in Descope's telling, is an agent that signs in as the customer with the person's own password and one-time code. Nothing in that session shows software was involved, so when a fraud rule fires the logs point at the person. The business ends up absorbing the cost in disputed orders and returns. Envoy is built around a proposed standard that offers a third option. Meta and Sierra Technologies Inc. published a 0.1 draft of the Personal Agent Protocol in October to set rules for how an agent signs in for someone without posing as them. Under Poppy, as the draft is known, a business publishes the endpoints agents should use and verifies which agent is calling. The business then issues a session bound cryptographically to that agent until the interaction ends. Developers who adopt Envoy do not have to implement Poppy themselves or keep pace with revisions to it. Descope runs discovery and agent identification, and agents need no advance registration because each one presents a published client metadata document. Session tokens are tied to a key the agent holds through the Demonstrating Proof of Possession standard. Envoy supports all three of the draft's sign-in types. Inside Envoy, businesses spell out what an agent is allowed to do on a customer's account through the Rich Authorization Requests extension to OAuth. In the example Descope gives, a retailer could let a shopping agent place orders for a customer and still keep it away from the payment methods on file. How long any elevated access lasts is left to the retailer as well. Sensitive actions can go back to the customer for approval on a separate channel, using Client-Initiated Backchannel Authentication. Another example from Descope has an agent booking travel hold a fare it found overnight and send the details to the customer's phone for approval the next morning. Every token and log entry records the customer and the agent as separate parties, so a company can revoke an agent's access without signing the customer out. Envoy runs alongside whatever customer identity system a business already has. Descope co-founder and Chief Executive Slavik Markovich said every login page on the internet was built for a person on the other side, and "that assumption no longer holds true." In his view, the Personal Agent Protocol is doing for consumer agents what the Model Context Protocol did for enterprise tools. GoFundMe Inc. and GoodRx Holdings Inc. are among the launch and design partners working with Descope on Envoy over the coming months. Each donation on GoFundMe is "an act of trust," according to Arnie Katz, the fundraising platform's chief product and technology officer. He said Envoy will keep the donor and the agent distinct in every session and ask users to approve donations from their phones. At GoodRx, Chief Technology Officer Nitin Shingate expects people to send agents out to compare pharmacies and find the lowest price on a prescription before they reach the counter. Agents there will get limited permissions covering pricing information. Agent builders get a tool of their own. A Poppy software development kit, released alongside Envoy, lets any agent work with the protocol, with Descope handling discovery and session management behind it. The kit is written in TypeScript and has no external dependencies. Envoy sits on top of Descope's Agentic Identity Hub, which the company updated last month with controls aimed at agents employees build or adopt inside their own organizations. The hub now handles authentication and access control for more than 1,000 MCP servers and millions of agent transactions each month, according to Descope. Descope is a venture capital-backed startup whose investors include Lightspeed Venture Partners, Notable Capital and Dell Technologies Capital. The company has raised $88 million to date, including a $35 million seed extension in September 2025. Image: Descope. A message from John Furrier, co-founder of SiliconANGLE: Support its mission to keep content open and free by engaging with theCUBE community. Join theCUBE's Alumni Trust Network, where technology leaders connect, share intelligence and create opportunities. * 15M+ viewers of theCUBE videos, powering conversations across AI, cloud, cybersecurity and more * 11.4k+ theCUBE alumni - Connect with more than 11,400 tech and business leaders shaping the future through a unique trusted-based network Are you an AWS customer? Support SiliconANGLE financially by buying your AWS services from its Marketplace portal page and links: https://siliconangle.com/aws-marketplace/. About SiliconANGLE Media. SiliconANGLE Media is a recognized leader in digital media innovation, uniting breakthrough technology, strategic insights and real-time audience engagement. As the parent company of SiliconANGLE, theCUBE Network, theCUBE Research, CUBE365, theCUBE AI and theCUBE SuperStudios - with flagship locations in Silicon Valley and the New York Stock Exchange - SiliconANGLE Media operates at the intersection of media, technology and AI. Founded by tech visionaries John Furrier and Dave Vellante, SiliconANGLE Media has built a dynamic ecosystem of industry-leading digital media brands that reach 15+ million elite tech professionals. Its new proprietary theCUBE AI Video Cloud is breaking ground in audience interaction, leveraging theCUBEai.com neural network to help technology companies make data-driven decisions and stay at the forefront of industry conversations.

Descope unveils Envoy, an identity-aware way for personal AI agents to act on people's behalf. Personal Agent Protocol support, granular agent permissions, and out-of-band user approval let consumer businesses accept personal agents alongside the customer identity stack they already run. November 04, 2026 09:00 ET | Source: Descope LOS ALTOS, Calif., Nov. 04, 2026 (GLOBE NEWSWIRE) - Descope, a developer-friendly customer and agentic identity platform, today announced Envoy, a set of capabilities that gives personal AI agents a delegated sign-in path alongside a consumer app's existing authentication flows. Consumer companies can now accept agents as first-class users - with their own identities, permissions, and approval flows - without rebuilding their identity stack. GoFundMe, You.com, GoodRx, and Composio are among several launch and design partners for Envoy who will work alongside Descope to improve Envoy in the months to come. Personal agents have reached consumer scale in record time. Meta's Muse passed 5 million downloads by the end of September, growing faster in its early months than ChatGPT, Grok, or Claude. The commerce rails underneath are being adopted quickly as well: OpenAI's Instant Checkout runs for roughly 900 million weekly active users, and Shopify is activating agentic storefronts for more than a million merchants. Shoppers are now asking an AI assistant to find a product, confirm the size, and place the order. When that agent arrives at a company's website, the company currently has two sub-optimal options: * Block the agent. Amazon blocked Muse in September, and JPMorgan Chase blocked outside agents including Muse and Instinct from directly accessing customer accounts in October. Blocking is a reasonable short-term response for companies with existing brand recognition, but it becomes harder to sustain as more customers route their shopping, travel, and account management through an agent. Businesses that aren't Amazon or JPMorgan risk giving up revenue to competitors that found a way to accept agents. * Let the agent sign in as the customer. The agent collects the customer's password and one-time code, signs in, and the site sees what looks like an ordinary human login. Nothing in the session records that an agent was involved, which means the business is dealing with impersonation rather than delegation. When an order goes wrong or a fraud rule gets enforced, the logs will point at the human customer, and the business will likely have to absorb the cost through disputed orders, returns, and support volume. A standard is taking shape for how delegated access for personal agents should work. Meta and Sierra published Personal Agent Protocol (Poppy) draft 0.1 in October, which gives a business a way to publish what its agent-facing endpoints are, verify the identity of the agent making the request, and issue a session that is cryptographically bound to that agent for the length of the interaction. Envoy gives consumer site developers an abstraction layer to support agents alongside human users without taking on the burden of implementing Poppy or keeping up with the specification as it evolves. Capabilities in Envoy include: * Personal Agent Protocol support, which lets businesses accept agent traffic without implementing the Poppy protocol draft themselves. Descope handles discovery, agent identification through Client ID Metadata Documents with no pre-registration required, session tokens bound to the agent's key with Demonstrated Proof of Possession (DPoP), and all three Poppy sign-in types. * Granular agent permissions, which let businesses define exactly what an agent may and may not do on a customer's account using Rich Authorization Requests (RAR). For example, a shopping agent can browse the catalog and place orders while remaining unable to touch account settings or payment methods, with the duration of any elevated access set by the business. * Out-of-band approval for sensitive actions, using Client-Initiated Backchannel Authentication (CIBA). For example, an agent that finds a flight overnight can hold the fare and send an approval request showing the airline, the times, and the total, which the customer can approve from their phone the next morning. * Delegation instead of impersonation, which keeps the customer and the acting agent distinct in every token and log entry. This distinction means that a company can revoke an agent's access without signing the customer out. * Augmentation instead of replacement, which lets Envoy run alongside the customer identity stack a company already has. "Every login page on the internet was built on the assumption that a person is on the other side, but that assumption no longer holds true," said Slavik Markovich, Co-Founder and CEO of Descope. "Consumer apps can either block agents or let them sign in as humans, but neither approach works in the long term. We believe the Personal Agent Protocol is doing for consumer agents what MCP did for enterprise tools, and are excited to announce Envoy to give consumer apps an easy, standards-based way to accept agent logins." "Every donation on GoFundMe is an act of trust, so when an agent acts for someone, we need to know exactly who is giving and who is acting for them," said Arnie Katz, Chief Product and Technology Officer of GoFundMe. "Envoy will keep the person and the agent distinct in every session, limit what an agent can do, and ask the user to approve donations from their phone. We're proud to be working with Descope to help build that future responsibly, on open standards and in service of our customers." "More and more, people will ask a personal agent to find the lowest price on a prescription, compare pharmacies, and line up savings before they reach the counter. That's where consumer healthcare is headed, and we want GoodRx to be ready for it," said Nitin Shingate, CTO of GoodRx. "Descope has been a trusted partner for us, and expanding that partnership to support AI agents lets us welcome them as first-class users. Agents get clear, limited permissions for pricing information, and our users stay in control of their actions." Alongside Envoy, Descope has also published a Poppy SDK for AI agent builders. This zero-dependency Typescript SDK enables any AI agent to easily become compatible with the Personal Agent Protocol, with Descope handling discovery, client metadata document generation, session management, DPoP API calls, and other elements required by the spec. Together, Envoy and the Poppy SDK help both consumer apps and AI agents adopt patterns for secure, delegated access. Envoy builds on the Descope Agentic Identity Hub, which handles authentication and access control for 1000+ MCP servers and millions of monthly agentic transactions. About Descope Descope is a developer-friendly customer and agentic identity platform. Organizations use our visual workflows, SDKs, APIs, and MCP server to easily create and customize identity journeys for their customers, partners, and AI agents. Thousands of organizations use Descope to streamline customer and agent onboarding, prevent account takeover, and securely adopt AI agents and MCP servers with built-in identity controls. Learn more at www.descope.com. Media Contact Christine Penwell Offleash for Descope [email protected]