Zalando proposes agent identity broker

When an AI agent needs to work across company systems, authorization becomes its own integration problem. Each system may have its own OAuth setup, consent process and token handling. Zalando Engineering’s open-source Agentic Identity Broker is designed to centralize those tasks: it manages delegated access and consent, and can bridge different OAuth2 systems.

The project describes using a gateway to handle token exchange centrally, so MCP servers can focus on providing tools rather than each implementing OAuth flows and secure token storage. It also includes a consent interface and audit logging, with options for scoped, revocable access. For a business, that points to a practical question: how will you control what an agent can do, and keep a record of approvals, as you connect it to more services?

The repository says the project is in active development and is used internally for several MCP servers. The harvest signal was modest, with 17 points and 3 comments, but relevant for teams building agent workflows. It’s an early project to assess, not evidence that one broker will fit every company’s identity setup. You can review the project details.