Keycard
Keycard builds an identity and access management platform purpose-built for AI agents, providing composite identity resolution, runtime policy enforcement, task-scoped credentials, and tamper-resistant audit trails for enterprises deploying autonomous coding and multi-agent systems.
- Company typePrivate
- Founded2025
- HeadquartersWilmington, United States
- Headcount11–50
- GTM typeB2B
- OfferingSoftware
What Keycard does
Keycard Labs, Inc. is a venture-backed private company founded in 2025 and headquartered in Wilmington, Delaware, that builds an identity and access management platform purpose-built for AI agents. The core technology constructs a composite identity graph combining user, device, agent, and task context, enforces policy at credential issuance using OAuth 2.0 Token Exchange, issues short-lived task-scoped credentials (with workload attestation via SPIFFE, k8s service accounts, cloud instance IDs, and mTLS), and streams tamper-resistant audit events to SIEM systems. Two specialized modules extend the platform: Keycard for Coding Agents (March 2026) provides runtime governance for autonomous coding agents integrating with OpenAI, Anthropic, Cursor, OpenClaw, and OpenCode, while Keycard for Multi-Agent Apps (May 2026) adds delegated session-based identity for multi-agent architectures using OAuth 2.0 Token Exchange at every hop.
The company operates an early access program via self-serve signup (console.keycard.ai) with SDK distribution, combined with enterprise field sales implied by its governance and security positioning. Its go-to-market targets engineering teams deploying AI coding agents and security-conscious enterprises needing runtime policy enforcement, audit trails, and least-privilege credential scoping. Pricing is not publicly disclosed; the platform follows a subscription model with quote-based enterprise deployment. Keycard has raised $38 million in combined seed and Series A funding from Andreessen Horowitz, Boldstart Ventures, and Acrew Capital, and has acquired Runebook (November 2025) and Anchor.dev (February 2026) to expand SDK ecosystem and absorb certificate/identity expertise. The company holds SOC 2 Type II certification and has been recognized on Redpoint's InfraRed 100, CB Insights' AI 100, and CRN's Top 10 Cloud Computing Startups to Watch lists.
Keycard firmographics
Firmographics- Name
- Keycard
- Legal name
- Keycard Labs, Inc.
- Website
- https://keycard.sh
- Company type
- Private
- Founded year
- 2025
- Operating status
- Operating
- Headcount range
- 11–50 employees
- Short description
- Keycard builds an identity and access management platform purpose-built for AI agents, providing composite identity resolution, runtime policy enforcement, task-scoped credentials, and tamper-resistant audit trails for enterprises deploying autonomous coding and multi-agent systems.
- Ownership category
- akta.pro rank
Keycard industry classification
Industry- Product category
- AI Agent Identity and Access Management
- NAICS
- Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (518)
- SIC
- Services-Computer Programming, Data Processing, Etc. (7370)
- akta.pro primary industry
- Device Identity & Certificate-Based Authentication (PKI) (BPAMAEAL)
- akta.pro secondary industries
- Responsible AI, Security & Privacy Platforms (Safety, Guardrails, PII) (HDAEANAG), Authorization & Permissions (delegation, allowances, capability-based access, session keys) (FSAPACAJ)
Keywords
Where Keycard is headquartered
LocationHeadquarters
- HQ city
- Wilmington
- HQ country
- United States
- HQ region
- North America
Markets served
Keycard business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Technology or R&D, Personnel, Infrastructure, Marketing or Sales, Operations
Revenue model
- Identity and Access Platform Subscription: Subscription-based platform access with early access program. Pricing not publicly disclosed. The platform appears to follow a seat or usage-based model for enterprise customers with governance and security controls.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Annual | Early Access Program |
Go-to-market motion1 record
Distribution channels3 records
Marketing channels8 records
Keycard product offering
Product offeringCore offering
Keycard provides an identity and access management platform purpose-built for AI agents. It resolves a composite identity from user, device, agent, and task context, enforces policy at the moment of credential issuance, and issues short-lived, least-privilege, task-scoped credentials while streaming tamper-resistant audit events to enterprise SIEMs. Specialized modules extend the platform to autonomous coding agents and multi-agent application architectures.
Product overview
Keycard is a unified identity and access platform for AI agents, consisting of a core platform plus specialized modules. The core Keycard Identity and Access Platform provides composite identity resolution, policy enforcement, and credential issuance for AI agents. Two key product modules extend this core: Keycard for Multi-Agent Apps (launched May 2026) provides session-based identity management for multi-agent architectures where each agent receives scoped, revocable access; and Keycard for Coding Agents (launched March 2026) delivers runtime governance specifically for autonomous coding agents with tool-level policy enforcement. The platform also offers an MCP SDK for building secure MCP-powered AI agents. Keycard emerged from stealth in October 2025 and has expanded through acquisitions of Runebook (November 2025) and Anchor.dev (February 2026).
Differentiator
Problem solved
Functional benefit
Brands
- Keycard for Coding Agents: Runtime governance platform for autonomous AI coding agents with identity-bound credentials, policy enforcement, and audit logging
- Keycard for Multi-Agent Apps
Products and services
- Keycard Identity and Access Platform
- Keycard for Coding Agents
- Keycard for Multi-Agent Apps
- Keycard MCP SDK
Quantifiable outcome
- 98% agent request success rate with 94% auto-approved in production environments
- +1 more outcomes
Companies that use Keycard
Customer profileSegments3 records
Ideal customer profiles2 records
Keycard technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- Yes
- API docs
- API detail
Core technology
AI maturity
App detail
Integration20 records
AI capability4 records
Feature8 records
Keycard partnerships and signals
Strategic signalPartnerships
14 partnerships are on record, tiered core, major and peripheral.
- 1PasswordcoreExpanded collaboration on securing credential handling for AI coding agents. Keycard simultaneously launched multi-agent application features that assign verifiable identity at runtime through attestation. Both solutions target securing non-human identities as AI agents take on autonomous tasks.
- Anchor.devmajorAcquisition of Anchor.dev, a stealth startup specializing in certificate issuance and validation. Anchor team brings expertise from Cloudflare, GitHub, and Heroku. Acquisition enables Keycard to add runtime security capabilities for autonomous AI coding agents, including tool-level governance and short-lived credentials.
- RunebookmajorAcquisition of Runebook, a stealth startup specializing in building user-friendly MCP-powered AI agents. Acquisition aimed at expanding Keycard's ecosystem of SDKs to help companies build and deploy trusted AI agents more securely.
- SmallstepcoreCollaborating on integrating hardware-rooted identification with policy enforcement for AI agents. Partnership focuses on device attestation and runtime governance for AI agents.
- LangChaincoreSDK integration partnership allowing Keycard's identity and access management to work with LangChain agent frameworks for building AI agents.
- MastracoreSDK integration partnership enabling Keycard's governance capabilities to work within Mastra agent development framework.
- AWScoreSupported cloud platform for Keycard deployment alongside GCP, Azure, Vercel, and Cloudflare.
- GCPcoreSupported cloud platform for Keycard deployment alongside AWS, Azure, Vercel, and Cloudflare.
- AzurecoreSupported cloud platform for Keycard deployment alongside AWS, GCP, Vercel, and Cloudflare.
- VercelcoreSupported deployment platform for Keycard alongside AWS, GCP, Azure, and Cloudflare.
- CloudflarecoreSupported deployment platform and source of Anchor.dev team expertise (previously at Cloudflare).
- OktacoreIntegration with Okta SSO for federated identity across Keycard's identity infrastructure.
- SplunkperipheralSIEM integration for real-time streaming of audit events from Keycard's platform.
- DatadogperipheralIntegration for observability alongside SIEM streaming capabilities.
Scale indicators4 records
Recent moves6 records
Expansion highlights5 records
Keycard competitors and assessment
Company assessmentDirect peers
- Token Security: Token Security provides machine identity and secrets security focused on non-human credentials across cloud and SaaS. Its scope overlaps with Keycard's credential lifecycle management and policy enforcement for AI agents.
- Oasis Security: Oasis Security is a non-human identity management platform covering discovery, governance, and threat detection for service accounts, API keys, and AI agents. It addresses the same customer pain point as Keycard around governing autonomous software identities at scale.
- Astrix Security: Astrix Security specializes in securing non-human identities (NHIs) and third-party integrations, with expanding coverage for AI agents and their tokens/credentials. It is comparable to Keycard in addressing the identity and access governance gap for AI-driven automation.
- Aembit: Aembit provides workload identity and access management for non-human identities including services, APIs, and increasingly AI agents. It is the most directly comparable peer to Keycard, addressing similar runtime credential issuance and policy enforcement for machine-to-machine access.
- Corsha: Corsha focuses on machine identity and credentialing for APIs and automated workloads, issuing short-lived identities to non-human actors. It overlaps with Keycard's task-scoped credentials and runtime governance positioning for AI agents and automated systems.
Broad incumbents
- BeyondTrust: BeyondTrust is a broad privileged access and identity security vendor with capabilities across human and non-human identities. Its enterprise footprint and identity governance roadmap represent competitive pressure on Keycard's enterprise sales motion.
- Okta: Okta is the dominant enterprise identity platform covering workforce SSO, customer identity, and increasingly privileged access. Keycard already federates with Okta SSO but Okta's expansion into AI agent identity (e.g., Okta AI) makes it both a partner and a potential competitor for Keycard's core market.
- HashiCorp Vault: HashiCorp Vault is the de facto standard for secrets management and dynamic credential issuance in cloud infrastructure. Its existing capabilities in short-lived, policy-bound credentials overlap significantly with Keycard's task-scoped credential approach.
- CyberArk: CyberArk is the leader in privileged access management with strong machine identity capabilities following the Venafi acquisition. Its enterprise security customer base and machine identity roadmap position it as a likely entrant into AI agent governance.
Emerging players
- Pangea: Pangea provides a developer-focused security platform that has expanded into AI agent guardrails and AI safety features. It is comparable to Keycard as an emerging infrastructure layer targeting AI application developers with security and governance primitives.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat4 records
Key risks5 records
Key highlights7 records
Customer concentration
Keycard social profiles
Digital presenceKeycard compliance and trust
Trust signalCompliance1 record
Keycard financial estimates
Financial estimateRevenue estimate
Valuation estimate
Keycard leadership team
Management profileNumber of profiles
Profiles3 records
Keycard subsidiaries and ownership
Company hierarchySubsidiaries2 records
Keycard funding detail
Funding detailFunding overview
Funding rounds2 records
Investors10 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Keycard M&A and investment
M&A and investmentM&A2 records
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Keycard
What does Keycard do?
Keycard provides an identity and access management platform purpose-built for AI agents. It resolves a composite identity from user, device, agent, and task context, enforces policy at the moment of credential issuance, and issues short-lived, least-privilege, task-scoped credentials while streaming tamper-resistant audit events to enterprise SIEMs. Specialized modules extend the platform to autonomous coding agents and multi-agent application architectures.
Is Keycard a public or private company?
Keycard is a private company. It is classified as venture growth investor backed and is currently operating.
When was Keycard founded?
Keycard was founded in 2025. It employs 11 to 50 people.
Where is Keycard based?
Keycard is headquartered in Wilmington, United States, in the North America region.
How does Keycard make money?
One revenue line is on record: identity and Access Platform Subscription.
Who are Keycard's main competitors?
Direct peers on record are Token Security, Oasis Security, Astrix Security, Aembit and Corsha. Broad incumbents are BeyondTrust, Okta, HashiCorp Vault and CyberArk. Pangea is listed as an emerging player.
Does Keycard have an API?
Yes. Keycard provides SDKs that handle OAuth 2.1 + PKCE authentication, agent identity binding, credential caching, task-scoped tokens, and automatic refresh. The SDK enables developers to add authentication to any agent surface (MCP, CLI, or API) with one import for full context. Token exchange functionality allows agents to exchange a Keycard JWT for scoped access to downstream resources. The platform supports connecting to MCP servers with built-in auth handling. Developer documentation is at docs.keycard.ai.
What industry is Keycard in?
Keycard's product category is AI Agent Identity and Access Management. Its primary akta.pro industry code is BPAMAEAL, Device Identity & Certificate-Based Authentication (PKI), with a secondary code of HDAEANAG, Responsible AI, Security & Privacy Platforms (Safety, Guardrails, PII). Its NAICS code is 518 and its SIC code is 7370.