READ-ONLY AGENT EXPOSURE SCANNER

Every agent gets an owner. Every privilege gets an expiry.

PermitGraph surfaces unmanaged AI agents and machine identities in customer-supplied metadata, maps what they can reach, and shows which credentials can outlive the job, without collecting secret values.

Inspect the live demo ↘See the 60-day pilot

✓ Metadata only
✓ Customer-run scanner
✓ No infrastructure changes

IDENTITY LINEAGELIVE MODEL

AGENTinvoice-reconcilerOwner missing

CREDENTIALprod-finance-keyNever expires

RESOURCEvendor-masterCritical · Write

92 CRITICAL

Built for teams deploying agents across

AWSGITHUBENTRAMCPSUPABASE

THE CONTROL POINT

See the path before you police the action.

Broad identity suites are moving into agent security. PermitGraph starts with the portable evidence layer they do not make easy: one normalized map of ownership, credentials, privileges, and consequential access.

Discover

Normalize customer-approved agent and machine-identity metadata into one graph. AWS, Entra, GitHub, MCP, and Supabase adapters are working today; other exports use an agreed field map.

Trace

Map agent to owner to credential to privilege to resource, including shared credentials and unconstrained delegation paths.

Prove

Prioritize exposures and export a tamper-evident evidence package with a stable SHA-256 integrity digest.

WORKING PRODUCT

Run an AWS, Entra, GitHub, MCP, or Supabase exposure scan.

Inspect AWS IAM paths, Entra service principals, GitHub Actions workflows, MCP tool grants, or Supabase functions and data surfaces through the same scanner used by the CLI. Secret-like fields are rejected before processing, and the hosted demo does not persist submissions.

Hosted sample boundary: this selected sample is sent to PermitGraph's hosted scan API and is not persisted.

Open the browser-local worksheet ↗

Service principals + permissions + credential metadata

ENTRA METADATA EXPORT · JSON2,994 BYTES

{
  "version": "1.0",
  "organization": "Northstar AI",
  "tenantId": "northstar-redacted",
  "servicePrincipals": [
    {
      "id": "invoice-reconciliation-agent",
      "displayName": "Invoice reconciliation agent",
      "servicePrincipalType": "Application",
      "agentic": true,
      "owner": null,
      "ownersCount": 0,
      "lastUsed": "2026-08-15T20:10:00Z",
      "requiresApproval": false,
      "accountEnabled": true,
      "credentials": [
        {
          "id": "invoice-agent-client-credential-2025",
          "kind": "client-secret-metadata",
          "displayName": "production client credential",
          "status": "Active",
          "startDateTime": "2025-01-01T00:00:00Z",
          "endDateTime": "2027-01-01T00:00:00Z",
          "source": "microsoft-graph-password-credential-metadata"
        }
      ],
      "appRoleAssignments": [
        {
          "resourceId": "microsoft-graph",
          "permission": "Directory.ReadWrite.All",
          "permissionType": "application"
        },
        {
          "resourceId": "finance-api",
          "permission": "VendorPayments.Write.All",
          "permissionType": "application"
        }
      ],
      "delegatedGrants": [],
      "directoryRoles": [
        {
          "name": "Application Administrator",
          "scope": "/"
        }
      ]
    },
    {
      "id": "release-notes-agent",
      "displayName": "Release notes agent",
      "servicePrincipalType": "Application",
      "agentic": true,
      "owner": "platform@northstar.example",
      "ownersCount": 2,
      "lastUsed": "2026-08-15T18:00:00Z",
      "requiresApproval": true,
      "accountEnabled": true,
      "credentials": [
        {
          "id": "release-notes-federated-identity",
          "kind": "federated-identity-metadata",
          "displayName": "GitHub Actions release notes",
          "status": "Active",
          "issuer": "https://token.actions.githubusercontent.com",
          "subject": "repo:northstar-ai/release-notes:ref:refs/heads/main",
          "audiences": [
            "api://AzureADTokenExchange"
          ],
          "source": "customer-approved-federated-identity-metadata"
        }
      ],
      "appRoleAssignments": [
        {
          "resourceId": "microsoft-graph",
          "permission": "Sites.Selected",
          "permissionType": "application"
        }
      ],
      "delegatedGrants": [],
      "directoryRoles": []
    }
  ],
  "resources": [
    {
      "id": "microsoft-graph",
      "name": "Microsoft Graph",
      "objectId": "graph-resource-redacted",
      "kind": "resource-service-principal",
      "sensitivity": "critical",
      "source": "microsoft-graph-service-principal-metadata"
    },
    {
      "id": "finance-api",
      "name": "Finance approval API",
      "objectId": "finance-api-redacted",
      "kind": "resource-service-principal",
      "sensitivity": "critical",
      "source": "customer-approved-resource-metadata"
    }
  ]
}

EXPOSURE REPORTWAITING

No report yet.Run the selected sample to map its identity exposure.

SAMPLE DELIVERABLE

See the evidence package before the pitch.

A buyer-ready sample shows the exposure score, prioritized register, recommended controls, integrity digest, and explicit assessment limits.

PermitGraph sample evidence report

Two pages. Real scanner output. No invented certification claims.

Download the sample PDF ↓

DESIGN-PARTNER TERMS

60-day pilot brief

Scope, success criteria, zero-custody delivery, data boundary, and the $4,000 commercial structure.

Download brief ↓

PRODUCT PATH

A wedge, not another identity suite.

The free scanner earns access to real environments. Continuous evidence earns the subscription. Runtime authorization becomes the strategic control point.

Now

Read-only scanner

Normalized input plus AWS, Entra, GitHub, MCP, and Supabase adapters; ownership; lineage; exposure scoring; evidence export.

Continuous posture

Scheduled collection, ownership inbox, drift detection, Slack/Jira alerts, and remediation workflow.

Then

Runtime authorization

Short-lived grants, action-level policy, human approval thresholds, revocation, and signed decision logs.