> Markdown version of [/events/world-congress-2026-north-america/sessions/1432-securing-ai-agent](https://www.wearedevelopers.com/events/world-congress-2026-north-america/sessions/1432-securing-ai-agent). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Securing AI Agent Infrastructure: Identity, Attestation, and Trust at Scale - **Event:** World Congress 2026 North America ## Description AI agents are moving from demos to production. They're accessing databases, calling APIs, orchestrating workflows—but most lack basic security primitives that we've required for human users for decades. This talk covers the security infrastructure layer every AI agent deployment needs: The Challenge - Agents run with API keys: no identity, no audit trail, easy to leak - MCP servers proliferate without verification—shadow IT for the AI era - No visibility into what agents are doing or what they're connecting to The Solution: Three Pillars - Cryptographic Identity: Ed25519 keypairs give agents unforgeable identity. Not credentials that can be shared—proof of who they are. - MCP Server Attestation: Verify every MCP server before connection. Detect configuration drift. Know when tools change. - Behavioral Trust Scoring: Static allow/deny isn't enough. Trust scores adapt based on agent behavior over time. Live Demo I'll secure an agent from scratch: generate identity, connect to attested MCP servers, enforce capability policies, and show the audit trail. You'll leave with patterns you can implement whether you use our open-source platform (AIM) or build your own. The concepts apply to LangChain, CrewAI, AutoGen, or any MCP-based system. 20 years of enterprise security lessons, applied to the AI agent era. ## Speaker ### [Abdel Fane](https://www.wearedevelopers.com/@abdel-fane) Founder of OpenA2A ## Related talks at this congress - [When Agents Became Users: Rearchitecting Identity and Permissions for AI at Scale](https://www.wearedevelopers.com/events/world-congress-2026-north-america/sessions/1713-when-agents-became) — Yoav Gal, Dor Cohen - [Responsible AI Architecture with Zero Trust Agents](https://www.wearedevelopers.com/events/world-congress-2026-north-america/sessions/1430-responsible-ai) — Ashok Prakash - [Zero-Trust Architecture for Agentic AI: Securing Multi-User Access and Third-Party Integrations](https://www.wearedevelopers.com/events/world-congress-2026-north-america/sessions/1707-zero-trust) — Borko Djurkovic - [Closing the Visibility Gap: Lessons from Safety Critical Agentic Systems](https://www.wearedevelopers.com/events/world-congress-2026-north-america/sessions/1408-closing-the) — Vivek Pandit ## Watch remotely Can’t make it to San José? Watch this session live with Pro. You also get: - All full videos, bookmarks, and playlists - World Congress livestreams [See pricing](https://www.wearedevelopers.com/pricing) ## Links - [Get tickets](https://www.wearedevelopers.com/world-congress-north-america/tickets)