For platform engineering
One call before every protected action, from whichever way your agents already work.
What you get
- Your agent proposes; the credential for the target never sits in the agent.
- REST, two SDKs, an MCP gateway and framework adapters reach the same check.
- Start in observe mode, then turn control on when the decisions look right.