# Kong Introduces Token Vault to Secure Enterprise Access for AI Agents
*New Kong Identity capability brokers downstream credentials at runtime, helping enterprises govern what agents have access to*
**SAN FRANCISCO, November 4, 2026 — **[_Kong Inc._](http://kong.ai)_Kong Inc._, the AI Connectivity Company,** **today announced the general availability of [_Token Vault for Kong Identity_](https://konghq.com/products/governance-and-identity)_Token Vault for Kong Identity_, a new capability that securely brokers downstream credentials on behalf of AI agents. With Token Vault, agents can access the APIs, MCP servers, models, data and other enterprise resources they are authorized to use without requiring downstream credentials to be exposed directly to the agent.
To work in production, agents need access to APIs, applications, data and services across the enterprise. But each system they interact with often has its own authentication requirements. Giving agents credentials for each system they need creates credential sprawl and can expose valuable secrets to the agent or its runtime environment. This is particularly risky because a compromised, misconfigured, or poorly behaving agent with persistent credentials can turn credential exposure into action faster than a human.
The challenge facing enterprises is providing agents with the broad access needed to show value without providing them with an ever-growing collection of credentials.
“Enterprises need a way to expand what agents can access without expanding the credentials those agents hold,” said Reza Shafii, Senior Vice President, Product at Kong. “Token Vault separates access from credential possession, allowing organizations to give agents the connectivity they need while keeping downstream credentials under centralized control. As agents take on more work across the enterprise, that distinction becomes critical to securing how they interact with the systems and data they rely on.”
With Token Vault, agents authenticate to Kong with their own identity, and Kong Identity determines what each agent is authorized to access. When an agent makes an authorized request to a downstream system, Token Vault brokers the right credential at runtime, so the agent never holds it.
By centralizing credential brokering, Token Vault lets organizations:
- - Simplify credential management and revocation
- - Reduce credential exposure and limit the impact of a compromised agent
- - Connect agents to new enterprise systems without building custom credential logic for each integration
Token Vault extends Kong Identity from identifying and authenticating agents to a complete approach to agent access: identify, authorize and broker. Combined with Kong’s gateways and policy enforcement, organizations get one architecture for identifying agents, authorizing access, brokering credentials, enforcing policies and auditing activity.
Token Vault is now generally available as part of Kong Identity. To learn more visit: [_https://konghq.com/products/governance-and-identity_](https://konghq.com/products/governance-and-identity)_https://konghq.com/products/governance-and-identity_
**About Kong Inc.**
Kong Inc., the AI Connectivity Company, is building the connectivity layer of AI. Trusted by the Fortune 500® and AI-native startups alike, Kong’s unified API and AI platform enables organizations to secure, manage, accelerate, govern, and monetize the flow of intelligence across APIs and AI traffic — on any model, any cloud. For more information, visit [_www.Kong.AI_](http://www.kong.ai)_www.Kong.AI_