Descope launches Envoy to allow consumer apps to accept personal AI agents as users

Descope Inc., a customer and agent identity platform company, today launched Envoy, a service that enables consumer websites and apps to accept personal artificial intelligence agents to act on behalf of their customers without redesigning the way people log in.

Agents arriving through Envoy are given their own identity, separate from that of the customer. The launch comes after a choice consumer companies have faced since agents like Meta Platforms Inc.’s Muse began shopping and paying on people’s behalf.

Amazon.com Inc. blocked Muse from its business in September, saying the agent did not identify itself as such when placing the order, and JPMorgan Chase & Co. moved a month later to keep outside agents out of customers’ bank accounts. Descope expects that as more customers make their purchases through an agent, it will become more difficult to maintain blocking.

The alternative, according to Descope, is an agent who logs in as a customer with the person’s own password and one-time code. Nothing in this session suggests that software was involved. So when a fraud rule is triggered, the logs point to the person. In the end, the company bears the costs of disputed orders and returns.

Envoy is based on a proposed standard that offers a third option. Meta and Sierra Technologies Inc. released a 0.1 draft of the Personal Agent Protocol in October to set rules for how an agent signs up for someone without impersonating them. Under Poppy, as the draft is called, a company publishes the endpoints that agents should use and verifies which agent is calling. The company then issues a session that is cryptographically bound to that agent until the interaction ends.

Developers adopting Envoy do not have to implement Poppy themselves or keep up with revisions to it. Descope performs discovery and agent identification, and agents do not require prior registration as each presents a published client metadata document. Session tokens are tied to a key held by the agent according to the Demonstrating Proof of Possession standard. Envoy supports all three login types in the draft.

In Envoy, companies use the Rich Authorization Requests OAuth extension to specify what an agent can do with a customer’s account. In the example provided by Descope, a retailer could have a purchasing agent place orders for a customer and still keep them away from the payment methods on file. How long increased access is valid is also up to the retailer.

Sensitive actions can be sent back to the customer for approval on a separate channel using customer-initiated backchannel authentication. Another example from Descope shows an agent booking a trip holding a rate found overnight and sending the details to the customer’s phone the next morning for approval.

Each token and log entry records the customer and agent as separate parties, allowing a company to revoke an agent’s access without logging out the customer. Envoy runs alongside any customer identity system a company already has in place.

Slavik Markovich, co-founder and chief executive of Descope, said every login page on the internet was created for a person on the other side and “that assumption no longer applies.” In his view, the Personal Agent Protocol does for consumer agents what the Model Context Protocol did for enterprise tools.

GoFundMe Inc. and GoodRx Holdings Inc. are among the launch and design partners working with Descope on Envoy in the coming months. Every donation on GoFundMe is “an act of trust,” said Arnie Katz, chief product and technology officer of the fundraising platform. He said Envoy will keep the donor and agent separate in each session and ask users to approve donations via their phones.

At GoodRx, Nitin Shingate, chief technology officer, expects people to send agents out to compare pharmacies and find the lowest price for a prescription before they get to the counter. There, agents receive limited permissions for pricing information.

Agent developers receive their own tool. A Poppy software development kit released alongside Envoy allows any agent to work with the protocol, with Descope behind it handling discovery and session management. The kit is written in TypeScript and has no external dependencies.

Envoy sits on top of Descope’s Agentic Identity Hub, which the company updated last month with controls aimed at agents building or acquiring employees in their own organizations. According to Descope, the hub now handles authentication and access control for more than 1,000 MCP servers and millions of agent transactions per month.

Descope is a venture capital-backed startup whose investors include Lightspeed Venture Partners, Notable Capital and Dell Technologies Capital. The company has raised $88 million to date, including a $35 million seed extension in September 2025.

Image: Descope