SailPoint announced an agent kill switch with Agentic Fabric on 6 October, and Okta lists a basic agent-deactivation one as available in its Okta for AI Agents (GA). The grown-up version is the one that revokes tokens already issued, and Okta’s 8 October gateway blog files that under “Coming soon” (Universal Logout extended to MCP Servers?).
Everyone agrees an off switch is table stakes; the argument is about how off “off” is. I wonder why no one is talking about reaching the platforms and stopping active payloads, containers, instances, etc… It’s not that complicated.
Sources: Help Net Security · Okta (8 Oct) · Okta (5 Nov)
