The hidden Identity crisis in agentic commerce
Blog post from Ory
As AI platforms like ChatGPT, Google's Gemini, and Meta AI rapidly expand their user bases and integrate with major brands such as Uber and Walmart, a new paradigm of "agentic commerce" is emerging, where AI systems autonomously conduct transactions on behalf of users. This shift presents significant challenges in identity and authorization management, as traditional models are ill-equipped to handle the complexities of AI agents making decisions based on natural language inputs. Industry experts highlight the urgent need for rethinking identity infrastructure to treat AI agents as distinct entities with their own permissions, employing context-aware and relationship-based access control. The lack of standardized protocols across competing AI platforms exacerbates the risk of security breaches, as users often lose track of delegated permissions. The development and adoption of open standards like the Model Context Protocol (MCP) are pivotal in ensuring secure interoperability, but comprehensive identity and authorization frameworks are still lacking. Companies that proactively implement advanced identity management systems will not only enhance security but also gain a competitive advantage in the evolving digital commerce landscape, as the race to establish safe, scalable agentic commerce continues.