Descope 推出 Envoy，讓消費者網站及應用程式接納個人 AI 智能體作為用戶

Descope launches Envoy to let consumer apps accept personal AI agents as users

Customer and agentic identity platform company Descope Inc. today launched Envoy, a service that lets consumer websites and apps accept personal artificial intelligence agents acting for their customers without rebuilding how people sign in.

Agents arriving through Envoy get an identity of their own, separate from the customer’s. The launch goes after a choice consumer businesses have been stuck with since agents such as Meta Platforms Inc.’s Muse started shopping and paying for things on people’s behalf.

Amazon.com Inc. blocked Muse from its store in September, saying the agent did not identify itself as one when placing orders, and JPMorgan Chase & Co. moved a month later to keep outside agents away from customer bank accounts. Descope expects blocking will get harder to maintain as more customers do their shopping through an agent.

The alternative, in Descope’s telling, is an agent that signs in as the customer with the person’s own password and one-time code. Nothing in that session shows software was involved, so when a fraud rule fires the logs point at the person. The business ends up absorbing the cost in disputed orders and returns.

Envoy is built around a proposed standard that offers a third option. Meta and Sierra Technologies Inc. published a 0.1 draft of the Personal Agent Protocol in October to set rules for how an agent signs in for someone without posing as them. Under Poppy, as the draft is known, a business publishes the endpoints agents should use and verifies which agent is calling. The business then issues a session bound cryptographically to that agent until the interaction ends.

Developers who adopt Envoy do not have to implement Poppy themselves or keep pace with revisions to it. Descope runs discovery and agent identification, and agents need no advance registration because each one presents a published client metadata document. Session tokens are tied to a key the agent holds through the Demonstrating Proof of Possession standard. Envoy supports all three of the draft’s sign-in types.

Inside Envoy, businesses spell out what an agent is allowed to do on a customer’s account through the Rich Authorization Requests extension to OAuth. In the example Descope gives, a retailer could let a shopping agent place orders for a customer and still keep it away from the payment methods on file. How long any elevated access lasts is left to the retailer as well.

Sensitive actions can go back to the customer for approval on a separate channel, using Client-Initiated Backchannel Authentication. Another example from Descope has an agent booking travel hold a fare it found overnight and send the details to the customer’s phone for approval the next morning.

Every token and log entry records the customer and the agent as separate parties, so a company can revoke an agent’s access without signing the customer out. Envoy runs alongside whatever customer identity system a business already has.

Descope co-founder and Chief Executive Slavik Markovich said every login page on the internet was built for a person on the other side, and “that assumption no longer holds true.” In his view, the Personal Agent Protocol is doing for consumer agents what the Model Context Protocol did for enterprise tools.

GoFundMe Inc. and GoodRx Holdings Inc. are among the launch and design partners working with Descope on Envoy over the coming months. Each donation on GoFundMe is “an act of trust,” according to Arnie Katz, the fundraising platform’s chief product and technology officer. He said Envoy will keep the donor and the agent distinct in every session and ask users to approve donations from their phones.

At GoodRx, Chief Technology Officer Nitin Shingate expects people to send agents out to compare pharmacies and find the lowest price on a prescription before they reach the counter. Agents there will get limited permissions covering pricing information.

Agent builders get a tool of their own. A Poppy software development kit, released alongside Envoy, lets any agent work with the protocol, with Descope handling discovery and session management behind it. The kit is written in TypeScript and has no external dependencies.

Envoy sits on top of Descope’s Agentic Identity Hub, which the company updated last month with controls aimed at agents employees build or adopt inside their own organizations. The hub now handles authentication and access control for more than 1,000 MCP servers and millions of agent transactions each month, according to Descope.

Descope is a venture capital-backed startup whose investors include Lightspeed Venture Partners, Notable Capital and Dell Technologies Capital. The company has raised $88 million to date, including a $35 million seed extension in September 2025.

Image: Descope

A message from John Furrier, co-founder of SiliconANGLE:

Support our mission to keep content open and free by engaging with theCUBE community. Join theCUBE’s Alumni Trust Network, where technology leaders connect, share intelligence and create opportunities.

• 15M+ viewers of theCUBE videos, powering conversations across AI, cloud, cybersecurity and more
• 11.4k+ theCUBE alumni — Connect with more than 11,400 tech and business leaders shaping the future through a unique trusted-based network

SiliconANGLE Media is a recognized leader in digital media innovation, uniting breakthrough technology, strategic insights and real-time audience engagement. As the parent company of SiliconANGLE, theCUBE Network, theCUBE Research, CUBE365, theCUBE AI and theCUBE SuperStudios — with flagship locations in Silicon Valley and the New York Stock Exchange — SiliconANGLE Media operates at the intersection of media, technology and AI.

Founded by tech visionaries John Furrier and Dave Vellante, SiliconANGLE Media has built a dynamic ecosystem of industry-leading digital media brands that reach 15+ million elite tech professionals. Our new proprietary theCUBE AI Video Cloud is breaking ground in audience interaction, leveraging theCUBEai.com neural network to help technology companies make data-driven decisions and stay at the forefront of industry conversations.