# Estonia Wants to Give Every AI Agent Its Own ID

_In June 2026 Estonia's prime minister proposed giving every AI agent a national ID code, tied to a responsible operator, with set permissions and an audit trail. It names the right principles. The open question is who checks each action against the limit at runtime._

By Johannes Keienburg, CEO & Founder  
Published: 2026-06-23  
Source: https://www.cakewalk.security/blog/estonia-ai-agent-id

---

## Putting AI Agents on the National Registry

In June 2026, Estonia's prime minister, Kristen Michal, endorsed a proposal to give every AI agent its own ID code, recorded in the same national registry that already tracks the country's citizens and companies. Estonia has spent two decades building a digital state, from online voting to its e-Residency program. Giving software a place in the registry is less surprising there than it would be elsewhere. Each agent's code would be tied to the person or organization that deployed it.

> To that end, it must be clear who is acting on whose behalf with what rights, and who is ultimately responsible.

_Estonian Prime Minister Kristen Michal_

The aim is to make an agent's authority easy to see. An agent's ID would record what it is allowed to do, whether that is reading data, editing documents or making payments, and up to what limit. The framework is also meant to be verifiable and auditable, so an agent's actions can be traced back to a named person or company.

## An Operator, a Limit and a Record

The prime minister's office was direct about the problem it wanted to avoid:

> The new IDs will help to prevent situations where individuals or organisations are required to grant AI assistants access to all of their rights, services and data.

_Office of the Prime Minister of Estonia_

The proposal rests on three principles that anyone governing AI agents would recognize. An agent should answer to a named operator. Its permissions should stay within set limits. What it does should be recorded. The prime minister has asked the Ministry of Economic Affairs to draft the legislation. The technical specifics, including how an agent's permissions and limits would be issued and checked, would be worked out there.

> Estonia is naming the right thing: an agent acts for a person, with limited rights, on the record. A driver's license records what you may drive. Staying within the speed limit is checked on the road. An ID works the same way. What stays open is the check on each action as it happens. So we tie every agent to the person it acts for, hold it to the least that person allows and evaluate that access at runtime, on each action it takes through the gateway, with one record of what was allowed, denied or escalated.

_Comment from Gil Röder, CPO & Co-Founder_

Source: Office of the Prime Minister of Estonia on AI agent identification, June 2026, as reported by Estonian public broadcaster [ERR](https://news.err.ee/1610060290/estonia-to-become-first-country-to-issue-id-codes-to-ai-agents).