Guides

These guides cover the runtime workflows used by Applications and the Users who authorize them. Choose the path that matches whose authority the workload needs, then follow it through connecting an account, obtaining access, and executing an operation.

Connect and execute

Connect an MCP client when you want a standard AI client to discover and invoke tools through an Axec gateway. For custom agent code, Execute tools and API requests explains MCP calls, combining services through a Gateway, and HTTP proxy access without handling upstream credentials.

Act for a User

Act on behalf of a User walks through browser authorization, PKCE, consent, and delegated Grants. When personal upstream access is needed, Connect an upstream provider establishes the User-owned Connection. If the work must continue beyond the browser session, Request offline access explains the bounded refresh lifecycle.

Run without a User

Run an autonomous Application when the workload uses its own configured automation access rather than a User’s Connection. This is different from management automation: pipelines that configure Account resources use Service Accounts, covered under Administration.

Understand governed outcomes

Security Architecture explains policy, approval, result-protection, and evidence boundaries. Management sign-in and Service Account access belong under Administration, separately from these runtime guides.