English
Keycard
Report

Keycard✓

@KeycardAI

Keycard puts users, developers and companies in control of AI agents with real-time, adaptive permissions and complete transparency.

43 Following4.7K Followers284 Posts
  1. Keycard✓@KeycardAI
    Keycard made the 2027 Fortune Cyber 60. @lightspeedvp's CISO survey found only a third of companies give agents their own scoped identities, and a quarter of them hand them human credentials. Agents need their own identities, scoped to the task. Full list in the reply.
    4311751
  3. Keycard✓@KeycardAI
    "The trick for anyone building these systems is how do I ensure that I don't bring the user into the loop except when absolutely required" @ianlivingstone explained how intent can help combat consent fatigue during our Intent Based Auth panel at AI Engineer NYC.
    Download
    209674
  4. Keycard✓@KeycardAI
    Posts @KeycardAI
    Watch the full panel
    00164
  5. Keycard✓@KeycardAI
    We're having fun talking to everyone at AGNTCon this week about runtime auth for agents. We led a debate on if security is ready for a headless future and gave a talk on how to give agents autonomy, capability, and security. Today is our last day, come say hi and see a demo!
    Download
    006504
  7. Keycard✓@KeycardAI
    Posts @KeycardAI
    To learn more about intent based auth watch our full panel from @aiDotEngineer NYC
    001103
  8. Keycard✓@KeycardAI
    Your best coding agent lives on one developer’s laptop. A software factory is when the whole team can share and learn from it. Here’s how to get there:
    118558
  9. Keycard✓@KeycardAI
    Posts @KeycardAI
    Read more about the Secure Software Factory reference architecture, in partnership with @Docker, @SocketSecurity, and others as part of Agent Baseline:
    001150
  11. Keycard✓@KeycardAI
    Posts @KeycardAI
    Watch it on YouTube:
    000127
  12. Keycard✓@KeycardAI
    What an amazing week! We spent the first half @aiDotEngineer NYC and the second half in SF for @AISecSummit and AAuth Night. We enjoyed meeting all of you and talking about runtime auth for agents, intent-based auth, and the new software factory reference architecture.
    Download
    1051.1K
  13. Keycard✓@KeycardAI
    Posts @KeycardAI
    Read the Software Factory Reference Architecture
    Ian Livingstone @ianlivingstone
    Today we're publishing the first draft of the Agent Baseline Software Factory Reference Architecture! An opinionated blueprint for securing increasingly autonomous software factories, built with folks across the community. It's open for feedback and contributions!
    000133
  14. Keycard✓@KeycardAI
    An agent's access for a task should be the overlap of what it can do and what the task needs, all inside what the org allows. More on how that works below.
    Ian Livingstone @ianlivingstone
    We've spent a lot of time at @KeycardAI thinking about how authentication and authorization need to evolve as agents take on more work. API keys and OAuth scopes were never designed to account for tasks, delegation between agents, or agents acting on their own. I wrote about how we're approaching this and what we think needs to change.
    405522
  15. Ian Livingstone✓@ianlivingstone
    We've spent a lot of time at @KeycardAI thinking about how authentication and authorization need to evolve as agents take on more work. API keys and OAuth scopes were never designed to account for tasks, delegation between agents, or agents acting on their own. I wrote about how we're approaching this and what we think needs to change.
    28393.7K
  16. Keycard✓@KeycardAI
    Posts @KeycardAI
    00031
  17. Keycard✓@KeycardAI
    Posts @KeycardAI
    Then access is enforced as the work happens: short-lived credentials per task, denied by default, and escalated only when policy allows. Task done, access gone.
    00016
  18. Keycard✓@KeycardAI
    Posts @KeycardAI
    That context has to come from the trigger and the handoff chain, never from the agent's own description of its task. Otherwise an agent can talk its way into more access.
    00019
  19. Keycard✓@KeycardAI
    Posts @KeycardAI
    Who's acting matters as much as what. An incident agent woken by an alert acts as itself. When it hands log analysis to another agent, that agent gets only what that piece of work needs.
    00056
  20. Keycard✓@KeycardAI
    Keycard
    RT @ianlivingstone: Today we're publishing the first draft of the Agent Baseline Software Factory Reference Architecture! An opinionated blueprint for securing increasingly autonomous software factories, built with folks across the community. It's open for feedback and contributions!
    0320238
  22. Show more posts