Agentic Inventory Matrix
What agents exist, what they touch, what threats they face?
Filter
Layers, by what they can actually enforce
- Self-declared — advisory
The agent reports itself. It can be wrong, stale, or absent entirely.
- Operator-declared — deterministic-when-invoked
The operator registered it. Accurate only as far as the operator knows.
- Discovered — deterministic-and-external
Found independently by scanning the target. Trusts neither of the above.
Showing 3 of 15.
Authorization at Self-declared
Agent reports allowed-tools list, MCP allowlist hashes, effective scope on registration. Updates on scope change.
Authorization at Operator-declared
Operator records authorized scope in registry, linked to RBAC manifest paths and IAM policy ARNs.
Authorization at Discovered
K8s RBAC API list, AWS IAM Access Analyzer effective permissions, Kyverno PolicyReports of policies actually applied.