Agent Governance Register

Reviewed

Shadow agent

In short: A shadow agent is an AI agent running with real access that nobody registered. It often starts as an experiment connected through a personal account or token. Shadow agents have no owner, no purpose statement and no review, which makes them the hardest agents to govern.

Which controls use this term?

  • GOV-16Shadow agent detection. Find agents that were created without registration, including agents connected through personal accounts or tokens outside single sign-on.
  • GOV-01Agent inventory. Keep a single, current list of every AI agent in use, with its platform, identity, tools and the systems it can reach.

Which terms are related?

Agent governance, Agent inventory, Non-human identity.

Reviewed by The Register desk