Can AI agents automate SailPoint Identity Security Cloud?

SailPoint Identity Security Cloud is automatable today through a public REST API on https://{tenant}.api.identitynow.com, official SDKs, and the official sail CLI. Getting Started shows personal access tokens exchanged with grant_type=client_credentials at /oauth/token; PATs are limited to 10 per user. The authentication guide also documents OAuth 2.0 client credentials for API clients and authorization code (plus a desktop/CLI PKCE variant) against {tenant}.login.sailpoint.com/oauth/authorize and {tenant}.api.identitynow.com/oauth/token. The spec index lists identities, accounts, sources, access requests, certifications, roles, entitlements, workflows, OAuth clients, and many other admin resources. A V3 gateway rate limit of 100 requests per access token per 10 seconds is declared. Official SDKs exist for Go, PowerShell, Python, TypeScript, and Angular. The sail CLI installs from Windows MSI, Homebrew, or Linux deb/rpm, supports OAuth and PAT, and documents connectors, search, set, spconfig, transform, VA, cluster, and workflow commands. SaaS Workflows are a vendor JSON engine, not a third-party plugin SDK. Human Fabric is the current marketing name for the ISC evolution, not a separate API. IdentityIQ is documented on a separate developer tree and is outside this record. First-party MCP ownership is not established. Computer-use viability is unassessed. API scores 8 and is the best path.

Best path today: api · Overall automatability: 8/10