Identity · CA
Three companies just built the missing pieces of agent identity
This week made concrete something that's been theoretical for a year: separating an AI agent's identity from the human who authorized it, layer by layer, rather than solving it with one big protocol.
Three announcements landed almost simultaneously. First, 1Password shipped a credential-injection system for Claude that lets an agent complete logins without ever seeing the password. The company built this on a zero-exposure architecture, meaning Claude can complete browser tasks that require logins and one-time passcodes, but the credentials never enter the model or its memory. 1Password stays the source of truth and injects credentials at runtime, scoped to the task.
Second, Dai Nippon Printing rolled out a delegated-identity layer for agentic commerce in Japan, built on its CATRINA distributed-ID platform and using verifiable credentials so merchants can confirm which human an agent is acting for and what authority it's been given — addressing the 'whose proxy' problem that emerges once agents start making purchases on their own.
Third, and most institutionally significant: the Linux Foundation completed the operational launch of the x402 Foundation, the open-governance body now stewarding the x402 payment protocol that Coinbase originally built. The Linux Foundation announced the operational launch of the x402 Foundation, a new open-governance body formed to steward the x402 protocol – the open standard for internet-native payments over HTTP. The x402 protocol, contributed by Coinbase, embeds secure payment capabilities directly into web interactions so that AI agents, APIs, and applications can send and receive payments as seamlessly as they exchange data, with support for payment types ranging from traditional cards to stablecoins. The foundation launched with a large founding membership: General members include Aleo, Fireblocks, Galaxia Moneytree, Hecto Financial, Injective, KakaoPay, Kite AI, LayerZero Labs, Merit Systems, NEAR Foundation, Orthogonal, Polygon Labs, Quant Network, SKALE, t54 labs, utexo, World Liberty Financial, and zerohash.
What's notable isn't any single piece — it's that these three now compose. DNP handles who authorized the agent and with what scope. 1Password handles how the agent authenticates without becoming the user. x402 handles the transaction itself once authority and access are settled. None of this required a single unified identity standard to win; it required the layers to interoperate, which is a more realistic path than the 'one protocol to rule them all' framing that dominated agent-identity discussion through 2025.
The gap that remains: none of these three coordinate with each other directly yet. A DNP credential doesn't automatically inform an x402 payment authorization, and 1Password's scoping model is Anthropic-specific for now. The stack exists in pieces before it exists as a stack.