One agent.
Followed on Oathera's live demo, from its first key to the copy that got caught.
Before Oathera · an example, not part of the recording
REPORTS_API_KEY=
Your agents sign in with borrowed keys.
Copy the key, and the copy is the agent.
With Oathera, it gets an identity of its own.
- oslinux
- archx64
- cpuAMD EPYC
- cores1
- memory6,180 MB
- machine idnone reported
- hostnamehashed
- addresseshashed
Host digest, recorded at enrollment
weBgXZSs1OtUvqoeZ_urDe3NGobmM7hN1D5kwXSKDKM
The Identity MCP created an Ed25519 anchor key on this host and observed the host.
Approved by Ada Okafor (the demo's built-in user, signed in at the identity provider)
The identity token lasts 120 seconds by default.
seconds. That is how long its identity token lasts, by default.
Then the Identity MCP asks for a new one, with a new session key that is never written to disk.
Attack 1 of 3 · run against the live gateway
Send the same signed call again.
Attack 2 of 3
Change one word after it was signed.
Attack 3 of 3
Skip the gateway. Use the token as a key.
A stolen token authorizes nothing.
The call carries a single-use proof made with the session key, and the token alone can't make one.
So far: one agent, on one machine.
Now copy it.
Copying northwind-reporter to this device: the same code, the same anchor key.
Enrolled host · as recorded
weBgXZSs1OtUvqoeZ_urDe3NGobmM7hN1D5kwXSKDKM
This device · computed here, never sent
computing
reading this device
Refused.
403 host_changed
The host digests differ, so the copy gets no token. Copy an agent and you get the same code with a different fingerprint.
Your browser stands in for the copy's machine. The Identity MCP reads the machine ID, hostname, CPU, memory and network addresses; a browser shows less, so this uses what it can see. Tokens issued before a copy stay valid until they expire.
Name your first agent.
Oathera gives every AI agent an identity bound to the machine it runs on, approved by a named person, and checked every time it acts.
Become a design partnerDesign partners start in early November 2026: a dedicated tenant, direct access to the founders, and a say in the roadmap. Values on this page come from one run of the live demo at sim.oathera.org.