---
title: "SailPoint wrote the rulebook for AI agent tool calls. The platforms bought it instead."
description: "SailPoint published the rulebook for policing AI agent tool calls on October 31. Workday, Cognition and Akamai spent October buying or shipping the same layer, and the December print must show whether anyone pays SailPoint for it."
publisher: "The Inference"
section: "Security"
published: 2026-11-03T16:14:23.806Z
modified: 2026-11-03T16:14:23.806Z
canonical: https://theinference.org/article/sailpoint-wrote-the-rulebook-for-ai-agent-tool-calls-the-platforms-bought-it-instead
language: en
keywords: "AI Agents, Cybersecurity, Identity Security, SailPoint, Workday"
---

# SailPoint wrote the rulebook for AI agent tool calls. The platforms bought it instead.

> SailPoint published the rulebook for policing AI agent tool calls on October 31. Workday, Cognition and Akamai spent October buying or shipping the same layer, and the December print must show whether anyone pays SailPoint for it.

The document itself is quiet about money. On October 31 [SailPoint](https://theinference.org/markets/companies/sailpoint), the identity security vendor, [published a blueprint for policing AI agents at the MCP layer](https://aigovernance.com/news/sailpoint-mcp-enforcement-model-closes-the-agent-authorization-gap), the interface where an agent calls a tool such as a database or a business application [1]. Before any tool call runs, four things get checked: which agent is asking, which server it targets, what action it wants, and which human started the session. Deny policies, intent classification and session logs follow the call from prompt to attribution. [1]

*Chart: **Deployment outran the controls: 5% of APAC enterprises govern agent access** Bar chart of APAC AI agent governance statistics: 95% run agents unsupervised, 85% run agents in production, 68% manage agent identities manually, 5% have tools governing agent access, 45% early in identity security journey, 30% can detect shadow AI.*

*Share of APAC organizations surveyed in SailPoint's Horizons of Identity Security Report, October 2026. Source: Asia Pacific Security Magazine [2]. [2]*

The blueprint cites the hole it fills: 55% of organizations run system-changing AI agents with no identity controls, and researchers have logged 253 MCP server bugs plus six framework bypasses. [1] [SailPoint's own APAC research, published days earlier](https://www.asiapacificsecuritymagazine.com/apac-organisations-run-ai-agents-widely-but-report-limited-governance-sailpoint-research-says/), sizes the customer base: 85% of Asia-Pacific enterprises run agents in production, but only 5% have deployed tools governing what agents can access, 95% run agents unsupervised, and 68% manage non-human identities by hand. [2]

## The control point is being bought, not licensed

The complication is that platforms are taking that layer rather than paying a specialist for it. On October 13 [Workday](https://theinference.org/markets/companies/workday) agreed to acquire C1, whose Agent Runtime Governance already ships intent-based access controls and enterprise-managed authorization for MCP-connected agents; [analysts framed the deal as pressure on SailPoint's identity layer](https://theinference.org/article/workday-named-sailpoint-not-its-partner-okta-as-the-rival-its-ai-agents-must-beat). [3] Workday has 17 agents in production and [reports on November 24](https://www.computerweekly.com/feature/Workday-Rising-Humans-and-AI-must-labour-cheek-by-jowl), the first print carrying the purchase. [4]

[Cognition](https://theinference.org/markets/companies/cognition) [folded the security startup Corridor into Devin Security](https://www.startupsacquired.com/deals/cognition-acquires-corridor) on October 28, and [Akamai](https://theinference.org/markets/companies/akamai)'s [Agent Sandbox isolates agent-written code](https://www.aiaffairs.com/technology/akamai-inference-agent-sandbox-launch/) in WebAssembly environments with outbound connections blocked by default. [5] [6] The counterpoint: [platform bundling does not always beat specialists](https://theinference.org/article/okta-s-agent-gateway-still-hasn-t-shipped-aembit-and-truefoundry-enforce-its-own-protocol), and governance spend often starts after the first enforcement action, not before. Regulators from the EU AI Act to Five Eyes guidance already assume an agent's action can be traced to a named person. [1]

## One customer would settle it

Watch SailPoint's December results for one thing: a named customer paying for agent authorization rather than a design document. Absent that, authorization becomes a payroll feature.

## Takeaway

Workday, Cognition and Akamai spent October buying or shipping the agent authorization layer SailPoint just published a rulebook for; the December print must show a named customer paying SailPoint for it, or it becomes a bundled platform feature.

## Sources

1. [AI Governance News, SailPoint MCP Enforcement Model Closes the Agent Authorization Gap, 31 October 2026](https://aigovernance.com/news/sailpoint-mcp-enforcement-model-closes-the-agent-authorization-gap)
2. [Asia Pacific Security Magazine, APAC organisations run AI agents widely but report limited governance, SailPoint research says, 30 October 2026](https://www.asiapacificsecuritymagazine.com/apac-organisations-run-ai-agents-widely-but-report-limited-governance-sailpoint-research-says/)
3. [Efficiently Connected, Workday Acquires C1: AI Agent Identity Governance Explained, 2 November 2026](https://www.efficientlyconnected.com/workday-c1-acquisition-ai-agent-identity-governance/)
4. [Computer Weekly, Workday Rising: Humans and AI must labour cheek by jowl, 2 November 2026](https://www.computerweekly.com/feature/Workday-Rising-Humans-and-AI-must-labour-cheek-by-jowl)
5. [Startups Acquired, Cognition acquires Corridor, the startup that builds security controls into AI coding agents, 3 November 2026](https://www.startupsacquired.com/deals/cognition-acquires-corridor)
6. [AI Affairs, Akamai launches inference service and sandbox for AI agent code, 3 November 2026](https://www.aiaffairs.com/technology/akamai-inference-agent-sandbox-launch/)


---

SailPoint wrote the rulebook for AI agent tool calls. The platforms bought it instead. — The Inference. Canonical: https://theinference.org/article/sailpoint-wrote-the-rulebook-for-ai-agent-tool-calls-the-platforms-bought-it-instead