Skip to content

Govern every path from intent to action

Axec gives applications an identity, binds access to explicit grants and connections, and enforces policy before credentials reach upstream systems.

The quickest way to understand Axec is to follow one request from an Application to an upstream capability, then inspect the authority and evidence that made it possible.

Quickstart

Create or select an Application gateway, attach a Connector, authorize access, invoke one MCP capability, and verify the decision evidence.

Run the end-to-end path →

How Axec works

See how Application identity, User grants, Connections, policy, approvals, Data Protection, and evidence form one trust chain.

Follow the execution flow →

Concepts

Learn the ownership and lifecycle of Applications, credentials, Service Accounts, Connectors, Connections, GrantBundles, Grants, and gateway capabilities.

Explore the domain model →

Guides

Connect clients, implement delegated or autonomous access, and continue approved work with offline access.

Choose a workflow →

Administration

Configure Operator SSO and use Service Accounts to automate Account management without granting agent execution authority.

Manage your Account →

SDK reference

Use the supported TypeScript and Python clients for delegated, autonomous, and management authority.

Choose an SDK →

Axec mediates credentials and reloads live authority at use time. The security model is explicit about what Axec can enforce, what it can observe, and what changes when a credential is released to a caller.

Read Security Architecture →