Agents receive distinct identities
Descope announced Envoy on 4 November as a set of identity capabilities for consumer applications that want to accept personal AI agents without treating them as the customer. The product supports delegated sign-in, granular permissions and approval flows, allowing an application to identify the person, the acting agent and the scope of authority separately. Descope says GoFundMe, You.com, GoodRx and Composio are among its launch and design partners.
Approval can move outside the agent session
The company describes out-of-band user approval for actions that exceed an agent’s standing permission, alongside support for the Personal Agent Protocol. This addresses a core agentic-commerce problem: a merchant needs evidence that software is acting for a real customer and within an authorised task. The announcement establishes product availability and partner participation, but it does not provide independent fraud, conversion or dispute-performance results.
What it means for merchants
Merchants exposing search, account or checkout actions to agents should require a separate agent identity, narrow scopes and fresh approval for higher-risk purchases. They should also retain the customer mandate and approval event with the order record. Delegated access reduces ambiguity, but refund and liability rules still need explicit commercial treatment.
Read the original announcement
Descope · 4 Nov 2026This brief summarizes the linked primary source. Claims and reported figures have not been independently audited by Payment Guide.