Skip to content
← Tools / Skills
ToolDescope/10 trustVerified
Descope logo

Descope

Drag-and-drop authentication plus first-class identity for AI agents.

Visit official site →

About

Descope is a drag-and-drop customer identity (CIAM) platform founded in 2022 by the team behind Demisto, the SOAR company Palo Alto Networks acquired. Developers build passwordless, social, SSO, and MFA login flows with a visual flow builder instead of hand-coding auth. It launched from stealth in February 2023 with $53M in seed funding and extended the round to $88M total in September 2025, earmarked partly for agentic identity R&D.

Since 2025 Descope has pushed into agent identity with its Agentic Identity Hub (2.0 announced January 2026): agents get first-class identities with ephemeral, scoped credentials, user OAuth consent flows create an auditable chain from agent actions back to the delegating human, and it acts as an OAuth 2.1 auth layer in front of MCP servers. Frost Radar named it a Leader in non-human identity solutions in 2025. It remains a seed-stage company, and figures like hundreds of millions of managed identities are vendor-reported.

What it can do

  • Visual no-code auth flows: passwordless, SSO, MFA, social
  • Agentic Identity Hub with ephemeral scoped agent credentials
  • OAuth 2.1 and PKCE auth layer for MCP servers
  • Credential vault with 50+ prebuilt SaaS connection templates

Setup

Create a Descope project, design the auth flow in the visual console, and drop the SDK or hosted flow into your app. SDKs cover web, mobile, and backend languages.

Prerequisites

An application needing user or agent auth; a Descope project.

Use cases

authenticationpasswordless-loginai-agent-identitymcp-security

Works with

Trust score — 8/10

/10 trustVerified

Scored 8/10 (verified tier, metrics-v1). Evidence: Verified via vendor site/docs/GitHub and reputable coverage, wave 93; Trending score 84/100 from researcher assessment.

Sources

Every fact above was checked against these sources. Where a claim comes from the provider and couldn't be independently verified, the text says so.