Descope releases Envoy to let consumer apps accept AI agents

Descope, a customer and agentic identity platform, released Envoy, a set of capabilities that lets personal AI agents sign in to consumer apps through a delegated path alongside existing authentication flows. Consumer companies can now accept agents as first-class users, each with its own identity, permissions, and approval flows, without rebuilding their identity stack.

Meta's Muse reached 5 million downloads by the end of September. When an agent reaches a company's website, the company has two options. It can block the agent, as Amazon did with Muse in September and JPMorgan Chase did with outside agents in October. Or it can let the agent sign in as the customer, which the site sees as an ordinary human login and reads as impersonation rather than delegation.

Meta and Sierra published Personal Agent Protocol (Poppy) draft 0.1 in October, which lets a business publish its agent-facing endpoints, verify the requesting agent, and issue a session cryptographically bound to that agent. Envoy provides Personal Agent Protocol support, granular permissions through Rich Authorization Requests, and out-of-band approval for sensitive actions using CIBA, while keeping the customer and agent distinct in every token and log entry.

Descope has also published a Poppy SDK for AI agent builders, a zero-dependency TypeScript SDK that helps any agent become compatible with the Personal Agent Protocol. Envoy builds on the Descope Agentic Identity Hub, which handles authentication and access control for 1000+ MCP servers. GoFundMe, You.com, GoodRx, and Composio are among the launch and design partners working with Descope on Envoy.

Slavik Markovich, Co-Founder and CEO of Descope, said: “Consumer apps can either block agents or let them sign in as humans, but neither approach works in the long term.” Arnie Katz, Chief Product and Technology Officer of GoFundMe, said: “Envoy will keep the person and the agent distinct in every session, limit what an agent can do, and ask the user to approve donations from their phone.”

Nitin Shingate, CTO of GoodRx, said: “Agents get clear, limited permissions for pricing information, and our users stay in control of their actions.” The partners will continue working with Descope to improve Envoy in the months ahead.