Axec

Runtime authorization for enterprise agents.

Product / Verge / MCP Gateway

Make every MCP action pass through policy.

Give AI clients and agents one governed route to approved MCP tools. Axec authenticates the caller, limits discovery, authorizes each invocation, and keeps provider credentials behind the boundary.

Join the private pilot
Private pilot intake / 2026

Bring us the agent workflow security will not approve.

We are working with a small number of platform teams moving high-risk agents from prototype to production.

Submitting opens your email client. Axec and its receiving mail provider will retain your message to respond. Do not include confidential data.

01 / Publish

One approved route to workplace tools.

Connect reviewed MCP servers once and expose only approved capabilities through a stable gateway. Employees keep their preferred AI clients while platform teams control the route.

  • Support remote MCP clients through Streamable HTTP and OAuth
  • Synchronize reviewed tool definitions into an approved catalog
  • Return only tools authorized for the current principal and client
Managed connection topology 8 endpoints governed

AI clients

  • ClaudeEmployee session
  • CursorDeveloper tools
  • CodexTerminal agent
  • AgentService workload

AxecManaged gateway

Identity
IdP synced
Agents
Service-owned
Control
Central revoke

Connections active

Workplace apps

  • GmailMail / Calendar
  • SalesforceCRM records
  • HubSpotCustomer data
  • SlackMessages / Channels
Identity-aligned accessOne revocation point

02 / Enforce

Authorize the exact call, not just the connection.

Axec resolves the caller, MCP session, server, tool, and current policy before every invocation. A prior login or successful tool listing never guarantees execution.

  • Re-evaluate authorization against immutable server and tool identities
  • Validate arguments against the approved tool schema
  • Deny safely when identity, policy, or connection state is unavailable
Runtime authorizationEvaluated inline

Requested actionsalesforce.record.delete

REQ-0173

Axec Policy evaluation

02 / Enforce
Actor
Alice / Finance
VERIFIED
Task
Quarterly account review
ACTIVE
Requested
record.delete
OUT OF SCOPE
Permitted
record.read
POLICY LIMIT

DecisionDeny

ReasonScope exceeds active task

Policy / finance-crm-v12Trace / AXC-0173

03 / Prove

Keep credentials behind the decision boundary.

Provider credentials are selected and released only after authorization, then kept outside the client and agent runtime. Each decision remains linked to its execution outcome.

  • Inject eligible provider credentials only after an allow decision
  • Attribute activity to the human, service, or registered agent
  • Retain verifiable decision and execution evidence for investigation
Decision evidence stream Evidence retained
ActorActionResourceDecisionTrace
Alicerecord.readSalesforceALLOWAXC-0172
Agentfile.shareDriveDENYAXC-0173
Alicemessage.sendGmailSTEP_UPAXC-0174

Selected evidenceAXC-0173

Signature verified

Principal
svc-agent-finance
Action
drive.file.share
Destination
External domain
Policy
data-egress-v7
Decision reason
Customer data cannot be shared outside approved domains.
Signed / attributable / verifiableExecution outcome linked