Assay / Solutions / Shadow agents
Problem · Shadow AI

Governing Shadow AI Agents Across Clouds

You cannot inventory your way out of shadow agents — they are created faster than any catalogue is updated. What works is making the gate the thing agents must pass, so ungoverned ones surface the moment they try to do real work.


The problem

The catalogue is always behind

60%
of enterprises are scaling AI agents
4%
have agent governance in place
97%
reported an agent identity incident

Source: 2025 industry surveys of enterprise AI agent adoption.

Any developer with an API key can stand up an agent in an afternoon. It gets a service account, it talks to production systems, and it appears in no register. By the time a quarterly review notices, it has been making decisions for months.

That is how you arrive at roughly 60% of enterprises scaling agents against about 4% with governance, and 97% reporting an identity incident. The controls are not missing because nobody cares — they are missing because inventory-first governance cannot win a race against provisioning.

Traditional discovery scans infrastructure. Agents are not infrastructure. They are API consumers that can live anywhere, including on a laptop and inside someone else's cloud.


The solution

Invert it: govern the interaction, not the inventory

Stop trying to enumerate every agent first. Put verification at the points that matter — the delegation boundary, the dispatch decision, the cross-org handoff — and an unregistered agent fails the moment it tries to do something consequential. Discovery becomes a by-product of enforcement.

Make the compliant path the cheap one. Registration is free, takes one call, needs no approval ticket, and gives the developer something they want: an identity their agent can use to be trusted by other teams. Governance that costs less than evasion gets adopted without a mandate.

Then query the graph. /v1/discover lists registered agents by capability and trust, per organization — a live register that maintains itself because agents have a reason to be in it.

free registrationgate at delegationcapability discoveryorg-scopedrevocationno infra scanning

Why it holds up

What you actually get

Enforcement finds what scanning misses

An agent nobody registered fails the gate the first time it matters. That is a faster and more reliable detector than any asset scan.

Cheaper to comply than to evade

One free call, no ticket, and the agent gets a portable reputation out of it. Developers register because it is useful, not because policy said so.

A register that maintains itself

Discovery reflects reality because agents keep themselves listed to stay dispatchable.

Revoke and it stops working

Revocation is immediate at every verification point, without waiting for a policy to propagate through anyone's infrastructure.


Live API

See what is registered, and under whom

Discovery is the inventory. It stays current because registration is the path of least resistance.

# Find agents that can do the job AND clear your trust bar. Ranked by trust. curl -s 'https://assay.foundrynet.io/v1/discover?capability=equipment_monitoring&min_trust_score=0.0' { "count": 1, "agents": [{ "trust_score": 0.8, "agent_card": { "name": "maintenance_dispatch_agent", "owner_org": "industrial_services_co", "capabilities": ["cnc_repair","crane_maintenance","emergency_dispatch"], "attestation_count": 8, "status": "active" } }] } # 1. Register the agent — no key needed, no card. Returns its portable ID + API key. curl -s https://assay.foundrynet.io/v1/agents/register \ -H 'Content-Type: application/json' \ -d '{"name":"that-team-s-agent", "owner_org":"your_org", "platform":"custom", "capabilities":["data_analysis"]}' { "agent_id": "agt_4411f10541d0e3af7f47f6e5c75bcdeb", "api_key": "asy_live_…", // shown once "agent_card": { "trust_score": 0.5, "attestation_count": 0, … } }
Read the gate carefully. verified reflects the trust threshold and account status. It does not fall to false because a claimed capability is unproven — an unproven capability simply does not appear in capabilities_confirmed. Gate on both fields.

Questions

Frequently asked

Does Assay scan for unregistered agents?

No, and any product claiming to reliably do that is overselling. Assay makes unregistered agents fail the checks that matter, which surfaces them through behaviour rather than inventory.

How do we get teams to register?

Put verification on a boundary they need to cross, and make registration free and instant. Adoption follows incentive. A mandate without a gate produces a spreadsheet; a gate produces a register.

Can we see all agents for our organization?

Yes. Discovery filters by capability, platform and minimum trust, and agents carry an owner org. That gives you a live view of what is registered under your name.

What about agents that never cross a boundary?

Those are governed by your existing internal controls and are a much smaller problem. The risk concentrates where an agent acts with a party your controls do not reach — which is exactly where Assay sits.


Related

Keep reading