As enterprises move AI agents from advisory roles into operational workflows, the risk has shifted. Agents are no longer just generating text. They are being connected to systems of record, financial platforms, cloud consoles, help desk tools, development environments, and customer data. That creates two urgent risks: hijacked agents manipulated by bad actors, and well-meaning rogue agents that act too broadly, too quickly, or without enough context.<\/p> Token\u2019s approach stops both.<\/p> With Token, an AI agent can prepare work, recommend action, gather context, and request authorization. A second agent can inspect the request and verify whether it appears truthful and aligned with policy. But before a high-consequence action can execute, the workflow stops at a Token biometric hard gate. The correct authorized human must approve the action using a Token biometric device. Until that happens, the transaction cannot proceed.<\/p> \u201cAI agents are becoming part of the enterprise operating system,\u201d said Kevin Surace, CEO of Token. \u201cThat is incredibly powerful, but it also means agents need real control points. More AI watching AI is useful, but it is still probabilistic. Biometric assured identity is deterministic. When an action matters, the right human must be physically present and must approve it biometrically. That is the control model enterprises need now.\u201d<\/p> Token\u2019s biometric assured identity platform already protects enterprise access by requiring a live fingerprint match, secure hardware, cryptographic authentication, proximity, and domain-bound credentials. Token devices do not rely on passwords, codes, push approvals, shared secrets, or cloud synced credentials. The same architecture now extends to agentic workflows, where enterprises need proof that the right human approved a specific action at the specific moment it was requested.<\/p> This changes how organizations secure AI autonomy.<\/p> A finance agent may be allowed to prepare a vendor payment, but not release funds without Token biometric approval. A support agent may identify records for deletion, but not delete them without an authorized human. An IT agent may recommend a privilege change, but not grant access until the correct approver signs biometrically. A software agent may write code and prepare a deployment, but not push to production or modify secrets without a Token hard gate.<\/p> In each case, Token allows the agent to work at machine speed while preventing the agent from crossing a line that could damage the business.<\/p> \u201cEnterprises do not need to slow AI down,\u201d Surace added. \u201cThey need to put absolute gates around the moments that matter. A hijacked agent should not be able to execute the attacker\u2019s intent. A well-meaning rogue agent should not be able to accidentally damage the business. Token makes both impossible at the transaction point.\u201d<\/p> Token will provide code, prompts, and integration patterns that allow organizations to add biometric approval gates into agentic workflows. Developers and security teams can define which actions require approval, which human roles are authorized, and where the Token gate must occur before execution.<\/p> Unlike software-only guardrails, Token\u2019s biometric gate sits outside the agent\u2019s reasoning environment. It is not another prompt. It is not another model opinion. It is not another policy suggestion. It is a hard stop enforced through biometric assured identity.<\/p> The announcement marks the next step in Token\u2019s continuing march to secure the modern enterprise identity perimeter. Token has already established biometric assured identity as the answer to phishing, stolen credentials, legacy MFA bypass, social engineering, and identity-based attacks. As AI agents become operational actors inside the enterprise, Token is extending that same proven identity foundation to secure the next major attack surface.<\/p> \u201cEveryone is moving quickly to deploy AI agents,\u201d said Surace. \u201cThe leaders are already realizing that agent autonomy needs assured human control. Token is already there. We are giving enterprises the confidence to deploy agents safely, knowing that no high-consequence action can be completed unless the correct human approves it biometrically.\u201d<\/p> Learn more about this new capability here: https:\/\/www.tokencore.com\/secure-ai-agents<\/a>.<\/p> About Token<\/b><\/p> Token is the leader in biometric assured identity for enterprises where breaches, data loss, ransomware, and unauthorized access must be prevented. Token provides secure biometric authentication devices and identity infrastructure that verify the right human, the right device, the right domain, and the right physical presence before access or action is granted. Token protects organizations against phishing, stolen credentials, legacy MFA bypass, social engineering, and now high-consequence AI agent actions.<\/p> For more information, visit www.tokencore.com<\/a>.<\/p>![](\"https:\/\/mms.businesswire.com\/media\/20260617629675\/en\/2833502\/22\/TokenCore_Human_in_the_Loop_AI_PR_Img.jpg\")
<\/a>![](\"https:\/\/mms.businesswire.com\/media\/20260617629675\/en\/2833502\/21\/TokenCore_Human_in_the_Loop_AI_PR_Img.jpg\")
<\/a>![](\"https:\/\/mms.businesswire.com\/media\/20260617629675\/en\/2833501\/22\/Token-Logo-Dark%402x.jpg\"){kind=logo}
<\/a>![](\"https:\/\/mms.businesswire.com\/media\/20260617629675\/en\/2833501\/21\/Token-Logo-Dark%402x.jpg\"){kind=logo}
<\/a>