{"templateId":"markdown","sharedDataIds":{"sidebar":"sidebar-sidebars.yaml"},"props":{"metadata":{"markdoc":{"tagList":[]},"type":"markdown"},"seo":{"title":"AI agents","description":"Okta Developer API Reference","siteUrl":"https://developer.okta.com","keywords":"okta, api reference docs","lang":"en-US","llmstxt":{"hide":false,"sections":[{"title":"Table of contents","includeFiles":["**/*"],"excludeFiles":[]}],"excludeFiles":[]}},"dynamicMarkdocComponents":[],"compilationErrors":[],"ast":{"$$mdtype":"Tag","name":"article","attributes":{},"children":[{"$$mdtype":"Tag","name":"Heading","attributes":{"level":1,"id":"ai-agents","__idx":0},"children":["AI agents"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["AI agents are autonomous software programs that perceive their environment, make decisions, and take actions to achieve specific goals. Okta for AI Agents lets you register, configure, and manage AI agents in your org so that they operate with least privilege and remain accountable members of your digital workforce."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"overview","__idx":1},"children":["Overview"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Okta for AI Agents manages the registration, configuration, and lifecycle of AI agents, helping to ensure the following:"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["AI agents are registered and validated before connecting to resources"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Apps are linked to AI agents for human-access accountability"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Public key credentials are configured correctly for agent authentication"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Access is authorized through standardized token exchange flows"]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"relationships","__idx":2},"children":["Relationships"]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":4,"id":"ai-agent-token-request-relationships","__idx":3},"children":["AI agent token request relationships"]},{"$$mdtype":"Tag","name":"Diagram","attributes":{"data-language":"mermaid","diagramType":"mermaid","diagramSource":"erDiagram\n AI-AGENT\n AI-AGENT ||--|| APPLICATION : \"linked for human access to workloads\"\n AI-AGENT }|--|{ ORG-AUTHORIZATION-SERVER : \"request ID-JAG tokens from\"\n AI-AGENT }|--o{ CUSTOM-AUTHORIZATION-SERVER : \"may exchange ID-JAG for access token\"\n AI-AGENT ||--o{ JSON-WEB-KEY : \"for authentication\"\n AI-AGENT ||--o{ CONNECTION : \"for authorization\"\n CUSTOM-AUTHORIZATION-SERVER ||--|| PROTECTED-RESOURCE : \"protecting a\"\n","diagramHtml":"

linked for human access to workloads

request ID-JAG tokens from

may exchange ID-JAG for access token

for authentication

for authorization

protecting a

AI-AGENT

APPLICATION

ORG-AUTHORIZATION-SERVER

CUSTOM-AUTHORIZATION-SERVER

JSON-WEB-KEY

CONNECTION

PROTECTED-RESOURCE

","diagramHtmlDark":"

linked for human access to workloads

request ID-JAG tokens from

may exchange ID-JAG for access token

for authentication

for authorization

protecting a

AI-AGENT

APPLICATION

ORG-AUTHORIZATION-SERVER

CUSTOM-AUTHORIZATION-SERVER

JSON-WEB-KEY

CONNECTION

PROTECTED-RESOURCE

"},"children":["erDiagram\n AI-AGENT\n AI-AGENT ||--|| APPLICATION : \"linked for human access to workloads\"\n AI-AGENT }|--|{ ORG-AUTHORIZATION-SERVER : \"request ID-JAG tokens from\"\n AI-AGENT }|--o{ CUSTOM-AUTHORIZATION-SERVER : \"may exchange ID-JAG for access token\"\n AI-AGENT ||--o{ JSON-WEB-KEY : \"for authentication\"\n AI-AGENT ||--o{ CONNECTION : \"for authorization\"\n CUSTOM-AUTHORIZATION-SERVER ||--|| PROTECTED-RESOURCE : \"protecting a\"\n"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Related developer documentation:"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"https://developer.okta.com/docs/guides/ai-agent-token-exchange/authserver/main/"},"children":["A detailed guide on AI Agent token exchange"]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"/openapi/okta-oauth/oauth/orgas"},"children":["Org Authorization Server"]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"/openapi/okta-oauth/oauth/customas"},"children":["Custom Authorization Servers"]}]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":4,"id":"ai-agent-user-sign-on-app","__idx":4},"children":["AI agent user sign-on app"]},{"$$mdtype":"Tag","name":"Diagram","attributes":{"data-language":"mermaid","diagramType":"mermaid","diagramSource":"erDiagram\n AI-AGENT\n APPLICATION\n USER\n ID-TOKEN\n\n AI-AGENT }o--|| APPLICATION : \"is linked to an\"\n APPLICATION }o--|| USER : \"on behalf of a\"\n USER }o--|| ID-TOKEN : \"token exchanges\"\n","diagramHtml":"

is linked to an

on behalf of a

token exchanges

AI-AGENT

APPLICATION

USER

ID-TOKEN

","diagramHtmlDark":"

is linked to an

on behalf of a

token exchanges

AI-AGENT

APPLICATION

USER

ID-TOKEN

"},"children":["erDiagram\n AI-AGENT\n APPLICATION\n USER\n ID-TOKEN\n\n AI-AGENT }o--|| APPLICATION : \"is linked to an\"\n APPLICATION }o--|| USER : \"on behalf of a\"\n USER }o--|| ID-TOKEN : \"token exchanges\"\n"]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":4,"id":"connection","__idx":5},"children":["Connection"]},{"$$mdtype":"Tag","name":"Diagram","attributes":{"data-language":"mermaid","diagramType":"mermaid","diagramSource":"erDiagram \n Connection {\n string type\n }\n Principal\n Protocol\n\n Connection ||--|| Principal : authorizes\n Principal ||--|| Protocol : \"to use\"\n Protocol ||--|| AuthorizationServer : \"with an\"\n AuthorizationServer ||--|| Token : \"for retrieving a\"\n","diagramHtml":"

authorizes

to use

with an

for retrieving a

Connection

string

type

Principal

Protocol

AuthorizationServer

Token

","diagramHtmlDark":"

authorizes

to use

with an

for retrieving a

Connection

string

type

Principal

Protocol

AuthorizationServer

Token

"},"children":["erDiagram \n Connection {\n string type\n }\n Principal\n Protocol\n\n Connection ||--|| Principal : authorizes\n Principal ||--|| Protocol : \"to use\"\n Protocol ||--|| AuthorizationServer : \"with an\"\n AuthorizationServer ||--|| Token : \"for retrieving a\"\n"]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"okta-for-ai-agents-lifecycles","__idx":6},"children":["Okta for AI Agents lifecycles"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Okta for AI Agents objects have lifecycles that are driven by system and user interactions."]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["When using these APIs, it's important to understand the potential status values of objects, and how they transition from one lifecycle state to another."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"ai-agent-status-lifecycle","__idx":7},"children":["AI agent status lifecycle"]},{"$$mdtype":"Tag","name":"Diagram","attributes":{"data-language":"mermaid","diagramType":"mermaid","diagramSource":"flowchart\nNOT-CREATED[\"not-created\"] --\"POST ../ai-agents\"--> OPERATION-STARTED[\"operation-started\"] --\"system process\"--> STAGED\nSTAGED --\"POST ../activate\"--> ACTIVE\nACTIVE --\"POST ../deactivate\"--> INACTIVE\nINACTIVE --\"DELETE ../ai-agents/{agentId}\"--> NOT-FOUND[\"404 Not Found\"]\n","diagramHtml":"

POST ../ai-agents

system process

POST ../activate

POST ../deactivate

DELETE ../ai-agents/{agentId}

not-created

operation-started

STAGED

ACTIVE

INACTIVE

404 Not Found

","diagramHtmlDark":"

POST ../ai-agents

system process

POST ../activate

POST ../deactivate

DELETE ../ai-agents/{agentId}

not-created

operation-started

STAGED

ACTIVE

INACTIVE

404 Not Found

"},"children":["flowchart\nNOT-CREATED[\"not-created\"] --\"POST ../ai-agents\"--> OPERATION-STARTED[\"operation-started\"] --\"system process\"--> STAGED\nSTAGED --\"POST ../activate\"--> ACTIVE\nACTIVE --\"POST ../deactivate\"--> INACTIVE\nINACTIVE --\"DELETE ../ai-agents/{agentId}\"--> NOT-FOUND[\"404 Not Found\"]\n"]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":4,"id":"ai-agent-status-descriptions","__idx":8},"children":["AI agent status descriptions"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["OPERATION-STARTED"]},": An AI agent creation request has been submitted. Okta is processing the registration asynchronously."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["STAGED"]},": The AI agent has been created and is ready to be activated. Initial state after successful registration."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["ACTIVE"]},": The AI agent is active and can authenticate to authorization servers and connect to resources."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["INACTIVE"]},": The AI agent is deactivated and can't authenticate or connect to resources."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["DELETED"]},": The AI agent has been deleted and removed from the system."]}]}]},"headings":[{"value":"AI agents","id":"ai-agents","depth":1},{"value":"Overview","id":"overview","depth":2},{"value":"Relationships","id":"relationships","depth":3},{"value":"AI agent token request relationships","id":"ai-agent-token-request-relationships","depth":4},{"value":"AI agent user sign-on app","id":"ai-agent-user-sign-on-app","depth":4},{"value":"Connection","id":"connection","depth":4},{"value":"Okta for AI Agents lifecycles","id":"okta-for-ai-agents-lifecycles","depth":2},{"value":"AI agent status lifecycle","id":"ai-agent-status-lifecycle","depth":3},{"value":"AI agent status descriptions","id":"ai-agent-status-descriptions","depth":4}],"frontmatter":{"title":"AI agents","meta":[{"name":"description","content":"Learn about AI agent management in Okta for AI Agents"}],"seo":{"title":"AI agents"}},"lastModified":"2026-05-22T16:22:36.000Z","pagePropGetterError":{"message":"","name":""}},"slug":"/secures-ai/ai-agents","userData":{"isAuthenticated":false,"teams":["anonymous"]},"isPublic":true}