microsoft / microsoft/agent-framework

.NET: Discussion: Agent Identity and Trust for Multi-Agent Workflows

Open
#4,842 17 comments 0 reactions 1 assignee Claimed by @sphenry View on GitHub
.NET
Dominant language
Python
Stars
13.6k
Forks
2.3k
Avg merge
2d 45m
Merged PRs (30d)
358

Description

## Summary

As the Agent Framework heads toward GA, enterprise customers will need verified agent identities for compliance and audit. Multi-agent workflows with graph-based orchestration need identity verification at handoff points.

## Problem

- Agents in multi-agent workflows have no cryptographic identity
- Workflow handoffs between agents have no verification step
- Enterprise compliance requires knowing exactly which agent performed which action
- Multi-tenant deployments need agent isolation and authentication

## Proposal

An identity provider interface that integrates with the framework's middleware pipeline. Agents carry signed credentials verified before workflow handoffs:

```csharp
builder.AddAgentIdentityProvider(options =>
{
options.Policy = IdentityPolicy.RequireVerified;
options.TrustThreshold = 0.8;
});
```

## Reference Implementation

[AgentID](https://getagentid.dev) provides:
- ECDSA P-256 certificates per agent
- Verification API for runtime credential validation
- Trust scores for authorization decisions
- Agent registry for discovery and audit

We have built integrations for CrewAI, LangChain, and MCP already.

Source: [github.com/haroldmalikfrimpong-ops/getagentid](https://github.com/haroldmalikfrimpong-ops/getagentid)

Happy to contribute a reference implementation.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.