A reference architecture secures AI agents with X.509 PKI on AWS. It uses Keyfactor EJBCA to sign request envelopes, user‑signed delegation assertions, RFC 8693 audience‑scoped tokens, and real‑time OCSP revocation, preventing agent‑to‑agent and MCP tool request forgery. This design strengthens agent identity verification for multi‑agent systems.
Opening Kapyn…