{
  "slug": "agents-minting-credentials",
  "title": "Your agent just created three service accounts. Who authorised those?",
  "summary": "Agents with admin access do not just use credentials, they mint them. Why issuance is the unsigned act that lets authority compound, and how to bind it to a human.",
  "lede": "Access control is built almost entirely to police the spending of authority. Almost nothing polices the minting of it. Agents with infrastructure access do not merely use credentials, they create them, and every credential they create can create more.",
  "date": "2026-09-17",
  "reading_time": "17 min read",
  "category": "Agents",
  "tags": ["non human identity", "service accounts", "credential issuance", "AI agents", "IAM", "secrets management", "provenance"],
  "image": "https://cdn.twc.sh/images/igcache/Agents%20Minting%20Credentials/1200_630/blog.jpg",
  "url": "/blog/agents-minting-credentials.html",
  "wordcount": 4147,
  "related": ["authority-graph", "offboarding-orphaned-authority", "revocation-that-propagates"],
  "schema": "Article"
}