Question 1

What is AIM (Agent Identity Management)?

Accepted Answer

AIM is an open-source platform for securing AI agents and agentic AI. It provides identity management, MCP security, agent bill of materials (ABOM), trust scoring, supply chain protection, and comprehensive audit logging for AI agent deployments.

Question 2

How do I secure my AI agents?

Accepted Answer

You can secure your AI agents with AIM using a single line of code: agent = secure('my-agent'). AIM automatically registers the agent, assigns a cryptographic identity (Ed25519), and begins monitoring for security threats. It works with LangChain, LangChain4j, CrewAI, and other frameworks.

Question 3

What is MCP security?

Accepted Answer

MCP security refers to securing Model Context Protocol (MCP) servers that AI agents connect to. AIM provides MCP attestation, which creates cryptographic verification that ensures MCP servers are authentic and haven't been tampered with. It detects drift, unauthorized changes, and supply chain attacks.

Question 4

What is an Agent Bill of Materials (ABOM)?

Accepted Answer

Agent Bill of Materials (ABOM) is a comprehensive inventory of all components in your AI agent ecosystem - similar to SBOM for software. AIM generates ABOMs that include all agents, MCP servers, capabilities, and their trust relationships, enabling supply chain security compliance and vulnerability tracking.

Question 5

What is agentic AI security?

Accepted Answer

Agentic AI security focuses on protecting autonomous AI agents that can take actions, use tools, and interact with external systems. AIM provides identity management for agentic AI, including capability enforcement, trust scoring, Just-In-Time (JIT) access controls, and automated threat detection.

Question 6

What frameworks does AIM support for AI agent security?

Accepted Answer

AIM supports popular AI agent frameworks including LangChain (Python), LangChain4j (Java), CrewAI, AutoGen, and any framework using MCP servers. Python SDK uses @perform_action decorators, while Java SDK uses @SecureAction annotations. Integration requires minimal code changes.

Question 7

Is AIM open source?

Accepted Answer

Yes, AIM is open source under the Apache-2.0 license. Organizations can self-host AIM or use AIM Cloud for managed infrastructure.

Notices

Registry scan findings published 27 February to 16 April 2026