Agentic sukuk: what happens when AI agents run Islamic investment certificates

Start with the two words

Sukuk (singular sakk) are certificates of equal value that give the holder an undivided share in an asset, a usufruct, a service, or the assets of a defined project. That is the AAOIFI Shariah Standard 17 framing, and it is the reason a sukuk is not a bond: you are an owner of something, not a lender to someone. If you want the long version, read what sukuk actually are and how they differ from bonds.

Agentic is a 2024-era word for AI systems that do more than answer. Gartner put agentic AI at the top of its 2025 technology trends list and defined such systems as ones that autonomously plan and take actions to reach goals a user sets. In plain terms: a chatbot writes you a paragraph; an agent books the flight, checks the visa rule, and emails you the receipt.

Put together, agentic sukuk means letting that kind of software run the dull, repetitive, rule-bound parts of a sukuk's life.

What an agentic sukuk would actually do

A sukuk lives for years and passes through dozens of hands. Most of the work is mechanical: checking a ratio, matching a payment, filing a report. Here is where agents fit, and where they stop.

1. Structuring. The agent drafts the term sheet from a template the Shariah board has already approved, runs the asset tests (is the underlying tangible, is the ratio of receivables within the board's limit, is the lease real), and produces a checklist with evidence. A scholar reads the checklist and approves or rejects the structure. The agent never decides compliance; it decides whether the paperwork is complete.
2. Issuance. The agent runs investor onboarding (identity checks, eligibility, suitability flags), allocates certificates, and settles cash against ownership records. The regulator's permission and the issuer's signature remain human acts.
3. Servicing. Every period the agent collects the rent or profit from the originator, calculates each holder's share, pays it, and reconciles the books. An auditor reviews the trail. This is the step where automation saves the most money and where most errors would be caught by simple reconciliation.
4. Monitoring. The agent watches how the asset is used. If a leased warehouse starts storing alcohol, if a receivables ratio drifts past the agreed limit, if the originator misses a rent payment, the agent raises a flag with the evidence attached. Scholars decide what the breach means. Lawyers decide what the contract says to do.
5. Maturity. The agent executes the purchase undertaking at the agreed price, moves the asset back, returns capital to holders, and files the closing report. The trustee confirms that it happened.

How far away is this? A maturity ladder

Markets do not jump from paper to autonomy. They climb. We use a five-level ladder to track where sukuk operations are, and we will move the marker as the evidence changes.

1. 0Paper
   Term sheets as PDFs, instructions by email, manual settlement. Still common for private placements.
2. 1Digital
   Electronic registers, API-connected custodians, dashboards. Where most of the trillion-dollar market lives today.
3. 2Tokenised
   Certificates recorded on a shared ledger, with programmable payment logic. Blossom Finance ran a small primary issuance on a public blockchain in 2019; Khazanah's RM100 million pilot in April 2026 brought it to a sovereign-linked issuer.
4. 3Assisted
   Agents draft, check, reconcile and alert. A human approves every step. Early versions exist inside banks as internal tools; none is disclosed as running a public sukuk end to end.
5. 4Agentic
   Agents execute routine steps without per-step approval, inside limits scholars and regulators set in advance, with humans signing only at the five gates. Nobody is here yet.

Why tokenisation comes first

An agent can only act on what it can read and move. A certificate recorded in a spreadsheet at a registrar is invisible to it. A certificate recorded on a ledger with a programmable payment rule is not.

That is why the Khazanah deal matters more than its size. The Securities Commission Malaysia said the pilot was designed to test functions such as smart contracts and custodial arrangements, with CIMB and Maybank in the issuance chain and institutional investors including KWAP and OCBC Malaysia. Those are precisely the plumbing questions an agentic design depends on: can a payment rule execute itself, who holds the keys, who can halt it.

Read the full picture in tokenised sukuk, explained.

The agent needs a safe way to use tools

The second piece of plumbing is less visible. Agents act by calling tools: a screening service, a payments API, a registry. In late 2024 Anthropic published the Model Context Protocol, an open standard that lets an AI system connect to data sources and tools through one shared interface instead of a custom integration per tool. Protocols like it are how an agent would call a Shariah-screening check before executing a step, with the call logged and the response attached to the audit trail.

The design principle that follows: every action an agent takes on a sukuk should be a tool call with a log entry and a rule it was checked against. No log, no action.

What could go right

• Cheaper issuance. Legal, administrative and distribution costs are why sukuk minimums are usually institutional. Automating servicing and onboarding is the plausible route to retail-sized tickets.
• Faster breach detection. Today a misuse of an underlying asset might surface at the annual audit. A monitoring agent could surface it in a day.
• Better transparency for holders. If every payment and every check is logged, holders could see them. Most sukuk holders today see a PDF twice a year.
• Shariah consistency. An agent applies the board's checklist the same way every time. Humans are better at judgement and worse at repetition.

What could go wrong

• Confident errors. An agent that misreads a lease term will misread it identically for every holder. Reconciliation and human audit are not optional.
• Rule drift. If the board's rules are encoded once and never revisited, the agent enforces 2026 rulings in 2032. Rules need owners and review dates.
• Authority creep. The temptation to let the agent "just handle" a grey case is the whole risk. The five gates exist to make creep visible.
• Jurisdiction. The Dana Gas dispute of 2017 to 2018 showed how a sukuk can be argued under one law in London and another in Sharjah. An agent cannot resolve that; it can only document it.

Who is positioned to build this

Nobody has announced an agentic sukuk product. The plausible builders are the parties already in the tokenised pilots (sovereign wealth funds, their regulators, and the arranging banks), Islamic fintechs with existing screening and payments tooling, and AAOIFI or IFSB if they choose to publish guidance on automated operations. We will list named efforts here as they appear, with sources, and nothing before that.

What this site will do

Two things. First, explain the underlying instrument well enough that a reader with no finance background can follow a term sheet: start with what sukuk are, the main types, and why scholars disagree about some of them. Second, track the agentic question with dated evidence: who issued what, which regulator said what, which human gate each design keeps or drops.

If you want to be told when the marker on the ladder moves, there is a one-field form at the bottom of this page. We send a note when something real happens and nothing otherwise.