Customer and agentic identity platform company Descope Inc. has officially launched Envoy, a service enabling consumer websites and applications to integrate personal artificial intelligence agents that act on behalf of users, all without requiring a complete overhaul of the login process.
Through Envoy, agents operate with their own distinct identities, separate from those of the customers they represent. This launch addresses a crucial challenge faced by consumer businesses since platforms such as Meta Platforms Inc.’s Muse began executing purchases and transactions on users’ behalf. In September, Amazon.com Inc. took action against Muse, prohibiting its access to the platform due to its failure to disclose its identity when placing orders. Subsequently, in October, JPMorgan Chase & Co. moved to restrict external agents from accessing customer bank accounts. Descope predicts that as more consumers shop via agents, enforcing such restrictions will become increasingly complex.
Descope posits that the alternative—where an agent signs into a customer’s account using the individual’s own password and one-time code—can lead to complications. In this scenario, the identity of the software is obscured, resulting in the customer being held accountable when fraud is detected, leading businesses to absorb the costs associated with disputes and returns.
Envoy is constructed around a proposed standard designed to provide a third option. In October, Meta and Sierra Technologies Inc. introduced a 0.1 draft of the Personal Agent Protocol, which aims to establish parameters that enable agents to sign in on behalf of a user without misrepresenting themselves. Known as Poppy, the draft allows businesses to publish the endpoints that agents should utilize and to authenticate the identity of the calling agent. Once verified, the business issues a session that is cryptographically bound to that agent, remaining valid until the interaction concludes.
Developers implementing Envoy do not need to manage the Poppy standard themselves or stay updated with its revisions. Descope oversees the discovery and identification of agents, and no advance registration is necessary; each agent provides a published client metadata document. Session tokens are linked to a key that the agent possesses via the Demonstrating Proof of Possession standard. Envoy accommodates all three sign-in types outlined in the draft.
Within Envoy, businesses can delineate the actions an agent is permitted to undertake on a customer’s behalf through the Rich Authorization Requests extension to OAuth. For instance, a retailer could allow a shopping agent to place orders for a customer while restricting access to the customer’s stored payment methods. The duration of any elevated permissions is determined by the retailer.
For sensitive actions, approval can be sought from the customer through a separate channel using Client-Initiated Backchannel Authentication. For example, an agent booking travel could secure a fare overnight and send the details to the customer’s phone for verification the following morning.
Every token and log entry differentiates the customer and the agent as distinct entities, enabling a company to revoke an agent’s access without logging the customer out. Envoy is designed to function alongside any existing customer identity system a business employs.
Slavik Markovich, co-founder and CEO of Descope, emphasized that traditional login pages were designed with an assumption of a human user on the other side, a premise that is becoming increasingly obsolete. He believes that the Personal Agent Protocol will transform consumer interactions with agents in a manner similar to what the Model Context Protocol accomplished for enterprise tools.
Among the initial partners collaborating with Descope on Envoy are GoFundMe Inc. and GoodRx Holdings Inc. Arnie Katz, Chief Product and Technology Officer at GoFundMe, noted that every donation represents “an act of trust.” He stated that Envoy would ensure a clear distinction between donors and agents in each transaction and would require users to approve donations through their mobile devices.
At GoodRx, Chief Technology Officer Nitin Shingate anticipates that users will employ agents to compare pharmacy prices for prescriptions before making a purchase. In this context, agents will receive limited permissions specifically related to pricing information.
Additionally, agent developers gain access to a specialized toolkit. A Poppy software development kit (SDK), released simultaneously with Envoy, enables any agent to interact with the protocol, while Descope manages the underlying discovery and session administration. This SDK is programmed in TypeScript and is free from external dependencies.
Envoy operates atop Descope’s Agentic Identity Hub, which was updated last month to enhance controls for agents developed or adopted within organizations. According to Descope, the hub now manages authentication and access control for over 1,000 MCP servers and millions of agent transactions on a monthly basis.
Descope is a venture capital-backed startup with investments from Lightspeed Venture Partners, Notable Capital, and Dell Technologies Capital, having raised a total of $88 million to date, including a $35 million seed extension announced in September 2025.