The access layer for AI agents.
They secure people using AI. We give agents their own identity: one key, one endpoint, a record of every call.
Live in a day,not a quarter.
Connect
Add your MCP servers. Paste an OpenAPI spec for anything that's yours. No credentials needed for the first look.
Classify
Gateway reads every endpoint and sorts it: read, write, and the calls with no undo.
Scope
Build a key from scopes and policies, not roles. Widen it later; nothing is locked in.
Deploy
One key, one endpoint. Swap it into your agent's config in a single line.
Watch
Every call lands in the logbook with the full payload. Live tail if you want to watch it happen.
Adjust
Widen, narrow, or pull a key in one move. Nothing waits on a ticket or a redeploy.
Every agent,one door.
MCP servers, your OpenAPI endpoints, internal APIs. Gateway puts all of it behind a single scoped key per agent.
Ship the agentsecurity blocked.
Infrastructure to say yes. Scope the key, not the whole API, and hand security a map instead of a promise.
Scopes stop over-reach
A key opens only the endpoints its job needs. It does not stop a compromised credential from acting within that scope.
Hard nevers stay hard
Calls you mark as no-undo are blocked at the gateway, not just discouraged in a prompt. No prompt can talk around them.
Every call is recorded
The logbook holds full payloads by default, 90 days, per-connector off switch. It shows what happened, not what might have.
| Endpoint | Access | Source |
|---|---|---|
| stripe.invoices.list | read | MCP |
| notion.pages.search | read | MCP |
| GET /customers/{id} | read | OpenAPI |
| POST /refunds | never | OpenAPI |
| slack.messages.post | write | MCP |
One endpoint,one key. That's it.
Swap five wired-in servers for one connector. Point tool_search at your org and it returns the three tools that match, already scoped.
~55k → ~2k tokens up front
312 loaded definitions become 4. The context you save is context your agent spends on the actual task.
The log that explains itself
Every call, every scope check, every denial. When something breaks at 3am, the logbook already knows why.
Same principles,open or managed.
Humans are never the metering axis. Not on the free plan, not on the paid one.