Keydris

Keydris (keydris.com) is a governance and orchestration platform for autonomous AI agents ¹². The product’s tagline is “Proof of authority for AI agents” ¹. It positions itself as “the authorization layer for AI agents that spend money,” addressing the problem that autonomous agents acting on behalf of businesses lack a verifiable, revocable proof of what they are permitted to do ¹.

As of July 2026 the product is in early access, with signups available by request ¹.

What it does

Keydris provides four core capabilities, organized around a gateway architecture ¹²:

1. Issue. The Keydris Gateway issues each agent a signed token called a KIT (Keydris Identity Token). The KIT states what the agent may do, under which policy, and for how long. Minimum privilege is the default ¹.

2. Seal. Each authorization is bound to an append-only, hash-chained log, creating an immutable record of what the agent was permitted to do ¹.

3. Verify. Enforcement happens at the counterparty’s front door. The Kit Reader, a lightweight middleware installed on top of an MCP server, checks the KIT with the gateway and allows or denies the call before it reaches the server ¹.

4. Revoke. Authority can be pulled at machine speed across every boundary. A revoked token fails verification instantly ¹.

The documentation describes Keydris as a platform that lets teams “issue short-lived credentials, define the operations and spending limits an agent is permitted, store the secrets agents need without exposing them, and prove after the fact exactly what happened” ².

Additional features

• Policy Builder. A visual canvas for authoring enforceable policies. Keydris compiles policies to Rego modules for evaluation ³.
• Vault. A secrets store where API keys and credentials are encrypted at rest. Agents reference tokens rather than handling plaintext secrets ³.
• Audit Logs. A tamper-evident trail recording every authorization decision, including the request, the policy in force, the checks performed, and the outcome ¹².
• Roles and Permissions. Per-organization roles (Admin, User, and reserved Management and Accounting roles) govern access to agents, policies, payments, and audit surfaces ⁴.

Pricing

Keydris documentation lists a “Plans” page, but specific pricing tiers are not publicly available at this time ⁵. The product is currently in early access with request-based signups ¹.

Who it’s for

Keydris describes its audience as “the teams responsible for running AI agents in production: platform engineers, security and compliance owners, and the operators who need day-to-day visibility into what every agent is doing” ². The homepage frames the product around institutional questions from CISOs (“Which of these actions was actually authorized, and by whom?”), heads of platform engineering, and compliance leads ¹.

How it compares

The AI agent authorization space is emerging rapidly. Below is a comparison of publicly available information across key players in the category.

Feature	Keydris	Keycard	1Password Agent Identity Kit	Aembit	WorkOS
Focus	Authorization + audit for agents that spend money 1	Dynamic, task-scoped credentials 6	Verifiable identity + scoped access for agents 7	Workload IAM for agents + MCP 8	Enterprise auth + MCP Auth 9
Token model	KIT (signed, scoped, revocable) 1	Ephemeral per-task credentials 6	Short-lived workload credentials 7	Policy-based, zero standing privileges 8	OAuth 2.1 sessions 9
MCP support	Kit Reader middleware on MCP servers 1	MCP protocol support 10	Not specified	MCP authorization policies 8	MCP Auth server 9
Free tier	Early access (not published) 1	5,000 txns/mo 10	Not published	3 AI agents 8	1M MAUs free 9
Paid from	Not published	$500/mo 10	Not published	Not published	~$99/mo 9
Audit trail	Hash-chained, append-only log 1	Real-time telemetry 10	Credential audit trails 7	Event log 8	Not specified

Alternatives

• Choose Keycard if you need a well-funded platform ($38M from a16z) with usage-based pricing already published and broad protocol support including OAuth 2.1, SPIFFE, and WIMSE ⁶¹⁰.
• Choose 1Password Agent Identity Kit if your organization already uses 1Password and wants to extend its identity fabric to cover AI agents with SDK, broker, and CLI tooling ⁷.
• Choose WorkOS if you are building on MCP and need an OAuth 2.1 authorization server alongside existing enterprise SSO infrastructure ⁹.
• Choose Aembit if you need workload identity management that covers both AI agents and traditional non-human workloads with a free starter tier ⁸.
• Choose Proof x401 if you need an open protocol for verifiable human-behind-the-agent identity, backed by Circle, OpenAI, Google, and Okta ¹¹.

Company

Keydris does not publicly disclose its founding team, legal entity, or headquarters. The documentation site was last updated on June 24, 2026 ². The company maintains a presence on GitHub and Discord, linked from its homepage ¹. Documentation is hosted on Mintlify ².

External links

• Keydris homepage ¹
• Keydris documentation ²
• Keydris quickstart guide ³
• Keycard pricing (competitor) ¹⁰

Footnotes

1. Keydris homepage. Retrieved July 28, 2026. https://keydris.com ↩ ↩² ↩³ ↩⁴ ↩⁵ ↩⁶ ↩⁷ ↩⁸ ↩⁹ ↩¹⁰ ↩¹¹ ↩¹² ↩¹³ ↩¹⁴ ↩¹⁵ ↩¹⁶ ↩¹⁷ ↩¹⁸ ↩¹⁹

2. Keydris documentation, Introduction. Retrieved July 28, 2026. https://docs.keydris.com ↩ ↩² ↩³ ↩⁴ ↩⁵ ↩⁶ ↩⁷ ↩⁸

3. Keydris documentation, Quickstart. Retrieved July 28, 2026. https://docs.keydris.com/quickstart ↩ ↩² ↩³

4. Keydris documentation, Roles and permissions. Retrieved July 28, 2026. https://docs.keydris.com/roles-and-permissions-1 ↩

5. Keydris documentation, Plans. Retrieved July 28, 2026. https://docs.keydris.com/plans ↩

6. Keycard launches with $38 million, Yahoo Finance. Retrieved July 28, 2026. https://finance.yahoo.com/news/keycard-launches-solve-ai-agent-130900959.html ↩ ↩² ↩³

7. 1Password Agent Identity Kit. Retrieved July 28, 2026. https://1password.com/solutions/ai-agent-identity ↩ ↩² ↩³ ↩⁴

8. Aembit, IAM for Agentic AI. Retrieved July 28, 2026. https://aembit.io/iam-for-agentic-ai/ ↩ ↩² ↩³ ↩⁴ ↩⁵ ↩⁶

9. WorkOS blog, AI agent credentials. Retrieved July 28, 2026. https://workos.com/blog/ai-agent-credentials ↩ ↩² ↩³ ↩⁴ ↩⁵ ↩⁶

10. Keycard pricing page. Retrieved July 28, 2026. https://www.keycard.ai/pricing/ ↩ ↩² ↩³ ↩⁴ ↩⁵ ↩⁶

11. Proof x401 protocol page. Retrieved July 28, 2026. https://www.proof.com/x401 ↩