Audience
Organizations building and operating AI agents on Google Cloud, especially developers and administrators responsible for agent identity, credentials, access control, and governance.
About Google Cloud Agent Identity
Google Cloud Agent Identity gives each AI agent a distinct, cryptographically attested identity and managed X.509 credentials for authenticating to Google Cloud resources as itself. Its identity and credential management APIs support agent authentication, access to tools and services, and credential management for user-delegated OAuth flows. Administrators can apply IAM controls, including principal access boundaries and service perimeters, and review audit logs that distinguish agent actions from actions performed on a user's behalf. The service supports agent workloads running on Gemini Enterprise Agent Platform Runtime (Agent Runtime), Gemini Enterprise, Cloud Run, and Google Kubernetes Engine. Agents can use its credentials to access cloud resources, external APIs, and Model Context Protocol servers. Availability and supported authentication flows depend on the host service.