Estonia wants to give every AI agent its own ID number

When an AI agent does something on your behalf today, it usually has to become you. It logs in as you, with your access to everything. Estonia wants to end that.

The country plans to issue personal identification numbers to AI assistants, the first nation to do so, prime minister Kristen Michal said. The idea is to give an agent its own identity, so what it is allowed to do can be limited, supervised and traced.

“It cannot be the case that a person is forced to give their AI assistant access to all of their rights, services, and data,” Michal wrote on X. “Agents must have limited, controllable, and auditable authorizations.”

Why a country built on digital IDs needs a new one

Estonia is the natural place for this. Its 1.3 million residents already use digital IDs to marry, see a doctor and sign documents, and its e-Residency scheme hands the same digital identity to non-resident entrepreneurs abroad.

But that system was designed on one assumption: that only humans have identity and accountability. An AI agent cannot legally authenticate, sign or take responsibility, so today it can only borrow a person’s credentials wholesale.

Giving agents their own IDs is meant to fix that gap, the same way e-Residency once created a legal identity for people who had never set foot in the country.

The agents are already inside government

This is not hypothetical for Estonia. It has put AI chatbots in every school through partnerships with OpenAI and others, and runs Bürokratt, a growing network of AI agents that handle public services.

Michal, who has an AI advisory council stocked with tech founders, recently built a “PM Cockpit” to track government priorities during a vibe-coding session on Anthropic’s Claude. Other states are moving too, from Ukraine’s Diia.AI to licensing pilots in Singapore.

The part that isn’t settled

Michal gave no start date and no detail on how liability would work when an agent with its own ID makes a mistake. Those are the hard questions, and they are unanswered.

Giving machines a formal identity inside critical state systems is a genuine accountability and security gamble. But it also reframes the agent problem usefully: the goal is not to set agents free, but to keep them on a leash you can actually see, as Europe scrambles to set its own terms on AI.