Anthropic federation for agents: what changes for identity teams?

TL;DR: An AI agent can exchange a short-lived SPIFFE-based JWT for an Anthropic access token, removing the need to store a reusable API key on the machine and limiting replay to a single use, according to Testifysec. That shifts the control point from leaked secrets to federated trust, which matters whenever agents operate outside tightly managed runtimes.

Editorial analysis by NHI Mgmt Group, based on content published by Testifysec: “Your Agent Can Call Claude Without an API Key”.

By the numbers:

• 96% of organisations store secrets outside of secrets managers in vulnerable locations including code, config files, and CI/CD tools, according to the Ultimate Guide to NHIs.
• 80% of identity breaches involved compromised non-human identities such as service accounts and API keys, according to the Ultimate Guide to NHIs.

Key questions

Q: Why do static API keys create risk for AI agent access?

A: Static API keys create risk because they are long-lived, reusable, and difficult to tie to a specific action.

Q: Why do short-lived federated tokens reduce agent identity risk?

A: They narrow the window in which a copied credential remains useful and can be bound to one issuer, one subject, and one audience.

Q: How should teams govern audience scoping for agent credentials?

A: Treat audience scoping as part of entitlement design, not a token detail.

Practitioner guidance

• Inventory every agent secret path Map where Anthropic API keys or equivalent credentials are stored, echoed, or passed into agent runtimes, including environment variables, config files, and shell history.
• Replace reusable keys with federated issuance Move agent authentication to short-lived token exchange so the machine never stores a durable bearer secret that can be copied and replayed.
• Scope federation rules per audience Bind each agent trust relationship to the exact relying party and approved subject pattern, then reject any audience that is not explicitly allowed.

Bottom line: Agent identity risk is no longer just about secret storage, because federated token exchange moves the control point to trust policy and token lifetime.

Explore further

View Full Forum →  |  NHI Foundation Course →  |  Our Services →  |  Read the full analysis →