Your AI Agent Has Too Much Access | Fixing Agent Identity

AI agents can do far more than answer questions — they can call tools, access data, execute actions, and act on behalf of users. But once agents start taking actions, an important question emerges: who is the agent actually acting as, and what should it be allowed to do?

In this episode of Kubernetes Bytes, Bhavin sits down with Maia Iyer, Research Software Engineer at IBM Research, to explore identity, authentication, authorization, and zero trust for AI agents.

They discuss why static API keys and simply passing user credentials to agents can create security problems, and how existing…