step-up authentication
In short: Step-up authentication asks for stronger proof of identity before a sensitive action, even inside an existing session. For agents, it usually means pausing a tool call until a person re-authenticates or approves. Silverfort describes a step up to a human at its MCP Gateway.
Where does it show up in practice?
Use step-up for actions such as payments, deletions and production changes.