Keycard
Runtime auth for agents that gives each agent its own identity and issues just-in-time, scoped credentials after verifying the workload, the user it acts for, and policy.
Active · Verified 2026-10-29 · fresh as of 2026-10-29 · 11 cited facts, 0 with a third-party source · 1 recorded change · Suggest a correction
At a glance
- Tier
- T3
- Section
- Agent identity & auth
- Created
- searched not found fix
- Latest release
- searched not found fix
- License
- proprietary vendor fix
- GitHub
- not applicable — no GitHub repo fix
- Pricing
- searched not found fix
- Funding
- searched not found fix
- Freshness
- 2026-10-29 fix
- Layer
- agent-infra repo fix
- Licensing
- commercial vendor fix
- SDK languages
- python, typescript registry fix
- Compliance
- soc2-type2 vendor fix
When to use
Optimised for: searched not found
Anti-fit: searched not found
Pros & cons
Pros
searched not found
Cons
searched not found
Claims & capabilities
Give each agent its own identity, authority to act, and access to resources under your policy.
Technical surface
- API surface
- searched not found
- Backend storage
- searched not found
- Deployment
- searched not found
- Embedding model
- searched not found
- Multi-tenancy
- searched not found
- MCP
- searched not found
- A2A
- searched not found
- OpenTelemetry
- searched not found
Alternatives to Keycard → live options ranked by shared design, licence, hosting and MCP support
Similar systems
Other agent identity & auth in the catalog, ranked by inbound references.
- Okta Cross App Access (XAA) T3
Okta-backed protocol for secure agent-to-app and app-to-app access, letting enterprise IT admins manage and audit which agents connect to which applications instead of relying on shared credentials or embedded tokens.
- Auth0 for AI Agents T3
Auth0's identity layer for AI agents, covering user authentication, calling first- and third-party APIs on a user's behalf through delegated authorization, asynchronous human-in-the-loop approval (CIBA), fine-grained authorization for RAG, and auth for MCP.
- Descope Agentic Identity Hub T3
Identity provider for AI agents and MCP servers that adds auth, consent, SSO, access control and policy to AI systems. It also manages purpose-built agent credentials for downstream connections and keeps a directory of an organization's agents.
- Merge Agent Handler T3
Production MCP connectors that link AI agents to thousands of enterprise tools, with guided user authentication, data-access controls and observability built in.
- Nango T3
Code-first integration platform that connects products and AI agents to 1,000+ APIs. It handles end-user OAuth, MCP and tools, syncs, webhooks and a request proxy.
- Paragon ActionKit T3
One API and MCP server that gives an AI agent product 1,000+ integration actions, with Paragon's embedded UI handling end users' authentication to their external apps.
Sources (10 cited facts, 0 third-party)
Each fact links to the page it came from; the badge says who published it (how to read sources).
- What it is Product vendor
- What it does & what's distinct Runtime auth for agents that gives each agent its own identity and issues just-in-time, … vendor
- Claims / benefits Give each agent its own identity, authority to act, and access to resources under y… vendor
- License proprietary vendor
- Project & sources https://www.keycard.ai/ vendor
- eval-human-loop yes vendor
- licensing-bucket commercial vendor
- taxonomy-three-layer-rollup agent-infra repo
- compliance-certifications soc2-type2 vendor
- sdk-languages python,typescript registry
What changed
Changes to this record's lifecycle, licence, release, pricing and hosting facts, from the catalog's git history. Subscribe (Atom)
- 2026-10-30 Added to the catalog #347
Related systems
References (7)
- Agent2Agent Protocol (A2A) integrates with — Keycard docs have an Agent-to-Agent SDK page using the A2A protocol. (verified 2026-10-29)
- Anthropic Claude (foundation models) integrates with — Keycard docs have a "Configure Anthropic" credential-brokering page. (verified 2026-10-29)
- Claude Code (Anthropic) integrates with — Keycard docs have a "Connect coding agents" guide putting Keycard between Claude Code and its tools. (verified 2026-10-29)
- Cursor (IDE) integrates with — Keycard docs have a "Connect coding agents" guide covering Cursor. (verified 2026-10-29)
- Model Context Protocol (MCP spec) integrates with — Keycard docs have an MCP SDK page (OAuth for MCP servers). (verified 2026-10-29)
- OpenAI GPT family (GPT-5 / GPT-4o / o3 / o4) integrates with — Keycard docs have a "Configure OpenAI" credential-brokering page. (verified 2026-10-29)
- Temporal integrates with — Keycard docs have a Temporal SDK page (per-execution tokens for Temporal Python workers). (verified 2026-10-29)