Section 3 · Step 3
Drilldown: claims-bot-v2
Fourteen months old. Built by someone who left six weeks ago. In a fully wired setup, SCIM deprovisioning from Okta or Entra would disable this user in Descope automatically, cutting off token issuance for agents acting on their behalf.
Identity chain
- Agent identityclaims-bot-v2MCP client · created Mar 8, 2025
- Associated userDao Nguyendnguyen@northwind.com · left the company
- Connected toloan-ops-mcpinternal · tenant northwind-us
- Policy accessLoan policies (includes export permission)MCP: loan-ops-mcp · Backend: Loan System
Token exchanges + delegation chain
4 entries in this session- export_customer_data · ALLOW151d ago · consent valid for dnguyen@northwind.comDelegated user:dnguyen@northwind.com→Agent:claims-bot-v2→Agent ID:TPAzOmunFebAV9sXXmWPibuhfjF8UD→Resource:export_customer_data
- export_customer_data · ALLOW152d ago · consent valid for dnguyen@northwind.comDelegated user:dnguyen@northwind.com→Agent:claims-bot-v2→Agent ID:TPAzOmunFebAV9sXXmWPibuhfjF8UD→Resource:export_customer_data
- export_customer_data · ALLOW155d ago · consent valid for dnguyen@northwind.comDelegated user:dnguyen@northwind.com→Agent:claims-bot-v2→Agent ID:TPAzOmunFebAV9sXXmWPibuhfjF8UD→Resource:export_customer_data
- export_customer_data · ALLOW159d agoDelegated user:dnguyen@northwind.com→Agent:claims-bot-v2→Agent ID:TPAzOmunFebAV9sXXmWPibuhfjF8UD→Resource:export_customer_data