Idira
Vendor: Palo Alto Networks
In short: Idira is the Palo Alto Networks identity platform launched in May 2026, after the CyberArk acquisition closed. Its Identity Broker sits as a proxy between agent and tools, obtains MCP tokens for agents and manages rotation. It is sold as add-on licences.
When does Idira fit?
- You already run CyberArk or Palo Alto Networks and want agent access in the same estate.
- You want a broker to obtain and rotate MCP tokens.
When is it less suited?
- You want a free tier or a published price.
Idira brings CyberArk identity security under Palo Alto Networks. For agents, the documented piece is the Identity Broker, which handles MCP tokens on the agent's behalf.
What does Idira document?
- Palo Alto Networks completed its CyberArk acquisition on 11 February 2026. Palo Alto Networks completes CyberArk acquisition, read 2026-11-03
- Idira launched on 12 May 2026. Palo Alto Networks introduces Idira, read 2026-11-03
- Identity Broker is a proxy between agent and tools that obtains MCP tokens for agents and manages rotation. CyberArk Secure AI architecture docs, read 2026-11-03
- Names MCP and OAuth 2.1. CyberArk Secure AI architecture docs, read 2026-11-03
What does it cost?
Sold as add-on licences. Palo Alto Networks introduces Idira, read 2026-11-03