What is a non-human identity?
A non-human identity is a first-class login for an agent or service. It is separate from a borrowed user account.
Non-human identities cover agents, jobs, and services. They start and stop often. Their credentials must move with that lifecycle.
What good looks like
Issuance on demand. Scope per job. Rotation on a clock. Revocation when the run ends. Logs that join identity to tool calls.
On klaut
Agents get their own login path into the MCP tools. Secrets, mail, and the rest hang off that identity.