Keycard Docs

Keycard Docs

Every agent gets an identity. Every tool call gets a credential. Every action gets a log.

QuickstartGet a working agent-to-tool connection in minutes

Why KeycardWhy agents need a new approach to identity, access, and trust

How it worksThe agentic access loop and authorization model

Getting Started

GETTING STARTED

From first line of code to production. Build agents that carry their own credentials.

Protect an MCP ServerLet LLMs call your tools with credentials scoped to the task and the user

Connect to 1P/3P APIsDelegated access to GitHub, Google, Slack — scoped to your user, not a service account

Build a Custom AgentA Slack agent that acts as each user, not a shared service account

All guides — including audit log export, tutorials, and more →

Platform

PLATFORM

Control agent access to tools, APIs, and data. Identity, policy, credentials, and audit in one system.

ZonesSecurity boundaries for users, applications, and resources

ApplicationsAgents, MCP servers, and services that access protected resources

ResourcesAPIs, databases, and services that applications access

ProvidersIdentity and credential providers — Okta, Google, GitHub, and more

All platform — architecture, authentication, authorization, and more →

SDK & Tools

SDK & TOOLS

The CLI and client libraries that make your agents and tools Keycard-aware.

Keycard CLISecure coding agents with scoped credentials, enforced policy, and full audit

MCP SDKPython, TypeScript, and Go — integrate Keycard into MCP servers, agents, and tools

Skills & ToolsPre-built tools with auth wired in — Gmail, GitHub, Slack — coming soon

PluginsDrop-in integrations for Claude Code, Cursor, and more — coming soon

All SDKs and tools — OAuth, Agents, Terraform, and more →

Console

CONSOLE

Your decisions become policy. Define what agents can access, enforce it at the edge.

Governance PoliciesDefine what’s allowed — enforced deterministically, versioned immutably

Identity ProvidersBring your own IdP — Okta, Auth0, Google, or any OIDC provider

Roles & PermissionsWho can do what, scoped to the organization or zone

Resource CatalogOne-click integrations — Gmail, Slack, GitHub, Linear, and more

All console — policies, identity providers, roles, and more →