Uber described updates to its identity and access stack to support AI agents, following the buildout of an internal agent platform in early 2025 and the enablement of MCP support over existing service APIs.
Uber said agent-to-agent hops can cause execution context to be lost, including the originating user and intermediate agents, reducing auditability and weakening policy enforcement.
Uber said its approach extends its Zero Trust architecture by establishing verifiable cryptographic agent identity and propagating it through an “AI Agent Mesh.” Uber said it uses short-lived, scoped JWTs minted per hop by a Security Token Service and an Agent Registry that serves as a source of truth.
Source: Source