Envoy separates agent access
By OpenTools Team
Agent revocation, customer session intact.
Revocation
Descope’s November 4 Envoy announcement says consumer apps can identify an acting agent separately and revoke its access without signing the customer out.1
Scope
Businesses set permissions and elevated‑access duration; separate approval can cover sensitive actions. That makes the scope granted to the agent a different question from approval of a particular transaction.1
Status
These are vendor‑described controls, not independently tested guarantees. Named design partners will help improve Envoy in coming months. The underlying Poppy protocol remains draft 0.1.1
Phone use while shopping, May 2025; archive, not Envoy use or approval. Photo: Nenad Stojković / Shixart1985 / Wikimedia Commons, CC BY 2.0. Downscaled and display‑cropped.
Sources
- 1.descope.com (descope.com)
- 2.Nenad Stojković / Shixart1985 / Wikimedia Commons (commons.wikimedia.org)
- 3.CC BY 2.0 (creativecommons.org)