AI agent authorization startup Arcade nabs $60M investment
Summary
AI agent authorization startup Arcade AI Inc. secured \$60 million in Series A funding, led by SYN Ventures with participation from Morgan Stanley and Wipro Ltd. This investment follows a \$12 million seed round last year. Founded in 2024 by Alex Salazar and Sam Partee, Arcade has developed a platform to streamline the authorization process for artificial intelligence agents accessing business applications. Historically, developers created custom authorization mechanisms, leading to bugs and time consumption. Arcade's platform offers prepackaged features that integrate with existing IdP systems, automatically adjusting AI agent permissions. It narrows the attack surface by authorizing only specific agent actions, utilizing the Oath 2.0 protocol and securely storing encrypted OTH tokens with a salting mechanism. The company plans to use the new capital to expand its agent governance features and its catalog of over 8,000 MCP tools.
Key takeaway
For AI Security Engineers designing agent deployments, recognize that authorization failures, not model errors, are a primary cause of production issues. You should prioritize dedicated authorization platforms like Arcade's to simplify managing agent access to business applications. This reduces custom code and narrows attack surfaces by authorizing specific actions. Integrating with existing IdP systems will significantly enhance your security posture and operational efficiency for AI agent initiatives.
Key insights
AI agent authorization requires dedicated, secure platforms to prevent failures and reduce attack surfaces.
Principles
- Authorization defines specific application features an agent can use.
- Custom authorization mechanisms often introduce bugs.
- Agents fail due to authorization proof, not model errors.
Method
Arcade's platform integrates with IdP systems, uses Oath 2.0 tokens, encrypts OTH tokens before storage, and applies salting to manage AI agent access permissions.
In practice
- Integrate IdP systems for automated permission updates.
- Use Oath 2.0 for secure agent access management.
- Log agent actions for auditing and governance.
Topics
- AI Agent Authorization
- Cybersecurity
- Identity Providers
- OAuth 2.0
- Startup Funding
- MLOps Security
Best for: Investor, CTO, VP of Engineering/Data, AI Security Engineer, AI Architect, MLOps Engineer
Related on AIssential
Editorial summary, takeaway, and curation by AIssential. Original article published by AI – SiliconANGLE.