Securing AI Agent Infrastructure: Identity, Attestation, and Trust at Scale

AI agents are moving from demos to production. They're accessing databases, calling APIs, orchestrating workflows—but most lack basic security primitives that we've required for human users for decades. This talk covers the security infrastructure layer every AI agent deployment needs: The Challenge - Agents run with API keys: no identity, no audit trail, easy to leak - MCP servers proliferate without verification—shadow IT for the AI era - No visibility into what agents are doing or what they're connecting to The Solution: Three Pillars - Cryptographic Identity: Ed25519 keypairs give agents unforgeable identity. Not credentials that can be shared—proof of who they are. - MCP Server Attestation: Verify every MCP server before connection. Detect configuration drift. Know when tools change. - Behavioral Trust Scoring: Static allow/deny isn't enough. Trust scores adapt based on agent behavior over time. Live Demo I'll secure an agent from scratch: generate identity, connect to attested MCP servers, enforce capability policies, and show the audit trail. You'll leave with patterns you can implement whether you use our open-source platform (AIM) or build your own. The concepts apply to LangChain, CrewAI, AutoGen, or any MCP-based system. 20 years of enterprise security lessons, applied to the AI agent era.