Agents
An agent in ThunderID is a machine identity for autonomous software, such as an AI assistant, a background worker, or a scheduled job. It is a first-class identity, separate from any user, with its own identifier, owner, credentials, attributes, and lifecycle. Because an agent carries its own identity, every action it takes is attributable to it, and its access is granted, restricted, audited, and revoked independently of any user.
What ThunderID provides for an agent
- An identity record with an owner and a configurable attribute schema. See Create and Manage Agents and Agent Schema.
- Credentials the agent authenticates with, a client secret or a private key JWT. See Agent Authentication.
- Scoped access through roles and groups, so an agent reaches only what its work needs. See Groups and roles.
- Tokens for how the agent acts: on its own with an agent token, on behalf of a user, or delegated to another agent.
For the concepts behind agent identity, the subject, actor, and resource model, and why an agent needs its own identity class, see the AI Agents use cases. To connect a framework quickly, see Getting Started.
