Identity and access management for AI agents
Keycard
Keycard builds identity and access infrastructure for AI agents, helping developers connect agents to services while security teams govern their actions. Keycard for Coding Agents applies runtime policies and scoped credentials across laptops, sandboxes, and CI environments. Keycard for Multi-Agent Apps gives developers Python and TypeScript SDKs for agents that collaborate, call external services, and connect to APIs. Both were introduced in early access in 2026.
The founders are CEO Ian Livingstone, Matthew Creager, and Jared Hanson, the creator of Passport.js. Keycard’s technical approach ties authorization to the user, agent, device, and task at execution time. Its multi-agent platform uses OAuth 2.0 Token Exchange to narrow permissions through delegation chains, with credentials held in memory and expiring when the session closes. Identity-linked telemetry lets teams investigate actions and revoke access. Keycard acquired Anchor.dev in 2026, adding certificate-based identity expertise to its coding-agent security work.
Keycard emerged from stealth in 2025 with $38 million in funding: an $8 million inception round co-led by boldstart and Andreessen Horowitz, followed by a $30 million Series A led by Acrew Capital. Chime was using Keycard’s platform in production in 2026.
3 talks
Newest firstThe Great Loops Debate — Dex Horthy, Geoff Huntley, Ian Livingstone, Greg Pstrucha, moderated by Allie Howe
◆Allie Howe · Dex Horthy · Geoffrey Huntley · Ian Livingstone · Greg Pstrucha
AI Engineer World's Fair 2026 · 1:00:16
4 speakers at AIE
Affiliations reflect their AIE appearances, not necessarily current employment.
Start here
- How to Secure Agents using OAuth
Start here to learn the roles of OAuth clients, resource servers, authorization servers, and consent in delegated agent access.
Jared HansonAI Engineer World's Fair 2025
- It's 10pm. Do You Know Where Your Agents Are?
Follow the incident-response demonstration to understand the consequences of excessive permissions and the enforcement questions that remain around MCP.
Kim MaidaAI Engineer World's Fair 2026
- The Great Loops Debate — Dex Horthy, Geoff Huntley, Ian Livingstone, Greg Pstrucha, moderated by Allie Howe
Use the debate to compare arguments about coding-agent autonomy and learn where CI/CD and pre-commit back pressure enter the discussion.
Allie Howe · Dex Horthy · Geoffrey Huntley · Ian Livingstone · Greg PstruchaAI Engineer World's Fair 2026
Messages from the stage
Delegation beyond API keys
Jared Hanson distinguishes OAuth authorization from OpenID Connect authentication and applies those concepts to MCP-connected agents, including client-registration friction and finer-grained scopes.
Policy checks before tool execution
Kim Maida traces an incident-response agent's execution path and explains how token exchange and a Security Token Service can check identity and policy before issuing audience-restricted credentials.
Testing the case for coding loops
The joint debate moderated by Allie Howe places Ian Livingstone's case for practical autonomy against challenges about reliable engineering outcomes. The discussion examines verification, code review, persistent shared state, and multi-agent coordination.
Affiliations reflect each recorded session, not necessarily current employment. The Great Loops Debate is a joint discussion with panelists beyond Keycard.
Company sources · checked 2026-08-28
- Keycard — The Control Plane for Autonomous Agents
- About — Keycard
- Blog — Keycard
- Keycard: The Identity and Access Platform for AI Agents, Welcome to boldstart!
- Announcing Keycard for Multi-Agent Apps: Auth for Agentic Systems
- Announcing Keycard for Coding Agents: Unlocking Autonomy without Sacrificing Security
- Coding Agents Are Ungovernable, We're Fixing That: Keycard acquires Anchor.dev.


