SailPoint wrote the rulebook for AI agent tool calls. The platforms bought it instead.
SailPoint published the rulebook for policing AI agent tool calls on October 31. Workday, Cognition and Akamai spent October buying or shipping the same layer, and the December print must show whether anyone pays SailPoint for it.
Vincent Jiang · 2 min read
The document itself is quiet about money. On October 31 SailPoint−0.10% — SailPoint, down 0.10 percent today, the identity security vendor, published a blueprint for policing AI agents at the MCP layer, the interface where an agent calls a tool such as a database or a business application 1. Before any tool call runs, four things get checked: which agent is asking, which server it targets, what action it wants, and which human started the session. Deny policies, intent classification and session logs follow the call from prompt to attribution. 1
Deployment outran the controls: 5% of APAC enterprises govern agent access
Data
| Value | |
|---|---|
| Run agents unsupervised | 95 |
| Agents in production | 85 |
| Manage agent identities manually | 68 |
| Can detect shadow AI | 30 |
| Early in identity security | 45 |
| Tools governing agent access | 5 |
The blueprint cites the hole it fills: 55% of organizations run system-changing AI agents with no identity controls, and researchers have logged 253 MCP server bugs plus six framework bypasses. 1 SailPoint's own APAC research, published days earlier, sizes the customer base: 85% of Asia-Pacific enterprises run agents in production, but only 5% have deployed tools governing what agents can access, 95% run agents unsupervised, and 68% manage non-human identities by hand. 2
The control point is being bought, not licensed
The complication is that platforms are taking that layer rather than paying a specialist for it. On October 13 Workday+0.02% — Workday, up 0.02 percent today agreed to acquire C1, whose Agent Runtime Governance already ships intent-based access controls and enterprise-managed authorization for MCP-connected agents; analysts framed the deal as pressure on SailPoint's identity layer. 3 Workday has 17 agents in production and reports on November 24, the first print carrying the purchase. 4
Cognition~$10B — Cognition, private, latest valuation ~$10B folded the security startup Corridor into Devin Security on October 28, and Akamai's−1.18% — Akamai, down 1.18 percent today Agent Sandbox isolates agent-written code in WebAssembly environments with outbound connections blocked by default. 5 6 The counterpoint: platform bundling does not always beat specialists, and governance spend often starts after the first enforcement action, not before. Regulators from the EU AI Act to Five Eyes guidance already assume an agent's action can be traced to a named person. 1
One customer would settle it
Watch SailPoint's December results for one thing: a named customer paying for agent authorization rather than a design document. Absent that, authorization becomes a payroll feature.
Get Security by email, free
The breaches, flaws and security vendors AI is putting to the test. In our daily email, every weekday.
