Keycard

https://www.keycard.ai/

Runtime auth for agents that gives each agent its own identity and issues just-in-time, scoped credentials after verifying the workload, the user it acts for, and policy.

Active · Verified 2026-10-29 · fresh as of 2026-10-29 · 11 cited facts, 0 with a third-party source · 1 recorded change · Suggest a correction

At a glance

Type
Product vendor fix
Tier
T3
Created
searched not found fix
Latest release
searched not found fix
License
proprietary vendor fix
GitHub
not applicable — no GitHub repo fix
Pricing
searched not found fix
Funding
searched not found fix
Freshness
2026-10-29 fix
Layer
agent-infra repo fix
Licensing
commercial vendor fix
SDK languages
python, typescript registry fix
Compliance
soc2-type2 vendor fix

When to use

Optimised for: searched not found

Anti-fit: searched not found

Pros & cons

Pros

searched not found

Cons

searched not found

Claims & capabilities

Give each agent its own identity, authority to act, and access to resources under your policy.

Technical surface

API surface
searched not found
Backend storage
searched not found
Deployment
searched not found
Embedding model
searched not found
Multi-tenancy
searched not found
MCP
searched not found
A2A
searched not found
OpenTelemetry
searched not found

Similar systems

Other agent identity & auth in the catalog, ranked by inbound references.

  • Okta Cross App Access (XAA) T3

    Okta-backed protocol for secure agent-to-app and app-to-app access, letting enterprise IT admins manage and audit which agents connect to which applications instead of relying on shared credentials or embedded tokens.

  • Auth0 for AI Agents T3

    Auth0's identity layer for AI agents, covering user authentication, calling first- and third-party APIs on a user's behalf through delegated authorization, asynchronous human-in-the-loop approval (CIBA), fine-grained authorization for RAG, and auth for MCP.

  • Descope Agentic Identity Hub T3

    Identity provider for AI agents and MCP servers that adds auth, consent, SSO, access control and policy to AI systems. It also manages purpose-built agent credentials for downstream connections and keeps a directory of an organization's agents.

  • Merge Agent Handler T3

    Production MCP connectors that link AI agents to thousands of enterprise tools, with guided user authentication, data-access controls and observability built in.

  • Nango T3

    Code-first integration platform that connects products and AI agents to 1,000+ APIs. It handles end-user OAuth, MCP and tools, syncs, webhooks and a request proxy.

  • Paragon ActionKit T3

    One API and MCP server that gives an AI agent product 1,000+ integration actions, with Paragon's embedded UI handling end users' authentication to their external apps.

Sources (10 cited facts, 0 third-party)

Each fact links to the page it came from; the badge says who published it (how to read sources).

What changed

Changes to this record's lifecycle, licence, release, pricing and hosting facts, from the catalog's git history. Subscribe (Atom)

  1. 2026-10-30 Added to the catalog #347

Related systems

References (7)

  • Agent2Agent Protocol (A2A) integrates with — Keycard docs have an Agent-to-Agent SDK page using the A2A protocol. (verified 2026-10-29)
  • Anthropic Claude (foundation models) integrates with — Keycard docs have a "Configure Anthropic" credential-brokering page. (verified 2026-10-29)
  • Claude Code (Anthropic) integrates with — Keycard docs have a "Connect coding agents" guide putting Keycard between Claude Code and its tools. (verified 2026-10-29)
  • Cursor (IDE) integrates with — Keycard docs have a "Connect coding agents" guide covering Cursor. (verified 2026-10-29)
  • Model Context Protocol (MCP spec) integrates with — Keycard docs have an MCP SDK page (OAuth for MCP servers). (verified 2026-10-29)
  • OpenAI GPT family (GPT-5 / GPT-4o / o3 / o4) integrates with — Keycard docs have a "Configure OpenAI" credential-brokering page. (verified 2026-10-29)
  • Temporal integrates with — Keycard docs have a Temporal SDK page (per-execution tokens for Temporal Python workers). (verified 2026-10-29)