The Pulse
Descope Announces Envoy to Give Personal AI Agents a Delegated Sign-In Path
Descope says Envoy supports the Personal Agent Protocol and gives consumer businesses granular agent permissions and out-of-band user approval alongside the customer identity stack they already run. The company also published a Poppy SDK fo
AI.info Team · Written with AI · fact-checked ·
“Consumer apps can either block agents or let them sign in as humans, but neither approach works in the long term. We believe the Personal Agent Protocol is doing for consumer agents what MCP did for enterprise tools, and are excited to announce Envoy to give consumer apps an easy, standards-based way to accept agent logins.”
Slavik Markovich, Co-Founder and CEO of Descope
Descope announced Envoy on November 4, 2026, as a set of capabilities that gives personal AI agents a delegated sign-in path alongside a consumer app’s existing authentication flows. Descope says Envoy gives agents their own identities, permissions and approval flows, allowing consumer companies to accept agents as first-class users without rebuilding their identity stack.
GoFundMe, You.com, GoodRx and Composio are among several launch and design partners for Envoy that will work alongside Descope to improve it in the months to come. Descope describes Envoy as a way for consumer businesses to accept agents as first-class users while keeping the customer and the agent distinct.
Descope says businesses currently have two sub-optimal options for personal agents
Descope describes two current choices for businesses facing personal agents: block them, or let them sign in using a customer’s credentials. The latter approach can leave a site with a login that looks like a human session, even when an agent supplied the password and one-time code.
Amazon blocked Muse in September, and JPMorgan Chase blocked outside agents including Muse and Instinct from directly accessing customer accounts in October. Descope says blocking is a reasonable short-term response for companies with existing brand recognition, but businesses that aren’t Amazon or JPMorgan risk giving up revenue to competitors that found a way to accept agents.
Descope says personal agents have reached consumer scale in record time. Meta’s Muse passed 5 million downloads by the end of September, growing faster in its early months than ChatGPT, Grok or Claude. Descope says OpenAI’s Instant Checkout runs for roughly 900 million weekly active users, while Shopify is activating agentic storefronts for more than a million merchants.
Descope says Envoy supports the Personal Agent Protocol
Meta and Sierra published Personal Agent Protocol (Poppy) draft 0.1 in October. Descope says the protocol gives businesses a way to publish agent-facing endpoints, verify an incoming agent’s identity and issue a session cryptographically bound to that agent for the length of the interaction.
Descope says Envoy provides an abstraction layer for consumer site developers, so they can support agents without implementing the Poppy protocol draft themselves. Descope handles discovery, agent identification through Client ID Metadata Documents with no pre-registration required, session tokens bound to the agent’s key with Demonstrated Proof of Possession (DPoP), and all three Poppy sign-in types.
Descope says businesses can use Rich Authorization Requests to set granular permissions for an agent on a customer’s account. A shopping agent, for example, can browse a catalog and place orders while remaining unable to touch account settings or payment methods; the business sets the duration of any elevated access.
Descope says Envoy uses Client-Initiated Backchannel Authentication (CIBA) to request out-of-band approval for sensitive actions. Descope’s example is an agent that finds a flight overnight, holds the fare, then sends the customer an approval request showing the airline, the times and the total, which the customer can approve from a phone the next morning.
Descope names Envoy partners and publishes a Poppy SDK
GoFundMe Chief Product and Technology Officer Arnie Katz said the company needs to distinguish the person giving from the agent acting for them. He said Envoy will keep the person and the agent distinct in every session, limit what an agent can do and ask users to approve donations from their phone.
Alongside Envoy, Descope has also published a Poppy SDK for AI agent builders. The company describes it as a zero-dependency Typescript SDK, with Descope handling discovery, client metadata document generation, session management, DPoP API calls and other elements required by the spec.
Envoy builds on Descope’s Agentic Identity Hub, which Descope says handles authentication and access control for 1000+ MCP servers and millions of monthly agentic transactions.