Guides
Step-by-step guides for building with Keycard, using the CLI with your coding agent, or directly with the SDK.
Step-by-step guides for building with Keycard. New to Keycard? Start with the Quickstart to get up and running, or read about How Keycard Works to understand the Keycard domain model.
Use the CLI
Section titled “Use the CLI”USE CLI + CODING AGENT
Build with the Keycard CLI and an agentic coding tool like Claude Code or Cursor.
Access APIs on Behalf of UsersBuild agents that act on behalf of signed-in users, with each API call scoped to that user’s identity, permissions, and audit attribution.Run Apps Without Static SecretsRun services without long-lived API keys. The workload’s own identity authorizes every call, with short-lived scoped credentials per request.Grant Agent Access to APIsBuild autonomous agents and multi-agent systems where each agent has its own identity, scoped permissions, and audit trail, independent of any human.
Use the SDK
Section titled “Use the SDK”USE KEYCARD SDKS
Integrate Keycard directly into your code with the Keycard SDKs. No CLI required.
Add Auth to Custom MCPAdd OAuth-based authentication to a custom MCP server so every tool call is tied to a verified user, scoped to explicit permissions, and logged for audit.Call External APIs from MCPGive your MCP tools access to GitHub, Google, and other APIs on behalf of users. Keycard handles OAuth token exchange, per-user scoping, and audit, with no stored secrets.Protect an APIBuild an API that knows which agent is calling and why, with per-request credentials scoped to one user, one agent, and one action.