Software signs in as itself.
Create
With a sponsor on record, and scopes no wider than its creator's.
Mint
Its own secret mints a short-lived token, again and again.
Act
Every request checks that the agent is still active.
Delegate
Acting for a person, its token says who is acting.
Stop
Suspend it, decommission it, or stop every agent at once.
01Identities
Agents, keys and devices. Each its own identity.
An identity made for agents, not adapted from a user.
AI agents are a first-class identity: active, suspended or decommissioned, with a sponsor on record, a status checked on every request, and short-lived tokens minted from their own secret.
- A kill switch stops every agent in the tenant at once
- Tokens checked on every request, not only at expiry
- Credentials rotate with an overlap and show their last use
PlansFrom Pro
Keys that cannot outgrow their owner.
Scoped keys for servers and scripts, shown once and then stored only as an Argon2id hash. A key acts only for the person who created it, and stops when they leave.
- Scopes no wider than its creator's
- Rotated with an overlap, its last use shown
- Stops working when its person is offboarded
PlansOn every plan
Acting for someone, and saying so.
Token exchange (RFC 8693) lets an agent or a service act for a person with a narrower token — and the token names who is acting.
- A token can only narrow, never widen
- It never outlives the credential it came from
- The acting party is named in the token
PlansOn every plan
Sign in where there is no keyboard.
The device authorization grant (RFC 8628) signs in a TV, a terminal or a command-line tool with a code entered elsewhere; CIBA lets an app ask a person to approve from their own device.
- Revoking a device's sign-in ends the tokens it got
- CIBA, in poll mode
PlansOn every plan
Know which software has standing access.
MCP servers can introspect the tokens they are handed, and a review lists the OAuth clients holding unattended machine grants — the AI tools nobody approved.
- Token introspection for MCP servers
- A review of unattended machine grants
PlansFrom Pro
Not in 1.0: an agent's sponsor is recorded but does not limit what the agent may do, and agents cannot yet make brokered calls to third-party services.
02Bounded
Machine access has edges you can see.
No wider than its maker
A key or an agent carries only scopes its creator holds.
Checked every time
An agent's token is checked on every request; suspend it and it stops.
Introspection is the answer
Whether a token is still good is answered with authority.
Locked after bad secrets
Wrong application secrets are counted, and the application locked out.
03On each plan
API keys on every plan. Agent identities from Pro.
Free
₹0/month
10,000 users
Starter
₹2,400/month
25,000 users
Pro
₹8,000/month
100,000 users
Enterprise
Custom
Custom scale
OAuth 2.0 grants: Free: included; Starter: included; Pro: included; Enterprise: included
API keys: Free: 2 keys; Starter: Unlimited; Pro: Unlimited; Enterprise: Unlimited
Signed webhooks: not on Free; Starter: included; Pro: included; Enterprise: included
AI-agent identities: not on Free; not on Starter; Pro: included; Enterprise: included