Enforce every call.
Platform / Agent Guardian
Give AI agents controlled execution across tools, apps, and APIs. The Agent Guardian mints short-lived, scoped credentials, evaluates real-time policy per call, and ties every action back to an accountable human.
WHAT CHANGES
Authorize access without handing over the keys.
No standing secrets
Issue scoped, short-lived credentials on demand. The agent never holds the service provider's standing credential.
Authorization per call
Evaluate each call at the operation level and route for human approval (human-in-the-loop) as defined by the policy.
Full accountability
Tie every action back to the agent, the accountable human or team, the policy, and the action.
Cut access precisely
Terminate a session, agent, or human path without disabling the entire account or breaking workflows.
No standing secrets
Issue scoped, short-lived credentials on demand. The agent never holds the service provider's standing credential.
Authorization per call
Evaluate each call at the operation level and route for human approval (human-in-the-loop) as defined by the policy.
Full accountability
Tie every action back to the agent, the accountable human or team, the policy, and the action.
Cut access precisely
Terminate a session, agent, or human path without disabling the entire account or breaking workflows.
No standing secrets
Issue scoped, short-lived credentials on demand. The agent never holds the service provider's standing credential.
Authorization per call
Evaluate each call at the operation level and route for human approval (human-in-the-loop) as defined by the policy.
Full accountability
Tie every action back to the agent, the accountable human or team, the policy, and the action.
Cut access precisely
Terminate a session, agent, or human path without disabling the entire account or breaking workflows.
HOW IT WORKS
Govern every call,
from request to audit trail.
NewCore's unified identity plane: humans and AI agents authenticate, get authorized, are secured, and are governed as they reach enterprise apps and systems, with every action recorded in a complete audit trail. Every approved request receives just-in-time, per-action access with no standing credentials and a complete audit trail.
JITephemeralper-actionno standing credentialsfull audit
RegisterRegister
Bring agents, humans, applications, and MCP servers into one governed registry.
ConnectConnect
Authenticate the agent through the identity platform. Governed calls stay on the brokered path from that point on.
BrokerBroker
Issue scoped, short-lived tokens on demand. The agent never holds the tool's standing secret.
AuthorizeAuthorize
Evaluate each tool call at runtime. Insert human-in-the-loop as dictated by policy.
AuditAudit
Record the agent, accountable human or team, policy, tool, and requested action.
CutCut
Terminate access, throttle requests, or route to human-in-the-loop controls by session, agent, or human.
RegisterRegister
Bring agents, humans, applications, and MCP servers into one governed registry.
ConnectConnect
Authenticate the agent through the identity platform. Governed calls stay on the brokered path from that point on.
BrokerBroker
Issue scoped, short-lived tokens on demand. The agent never holds the tool's standing secret.
AuthorizeAuthorize
Evaluate each tool call at runtime. Insert human-in-the-loop as dictated by policy.
AuditAudit
Record the agent, accountable human or team, policy, tool, and requested action.
CutCut
Terminate access, throttle requests, or route to human-in-the-loop controls by session, agent, or human.
RegisterRegister
Bring agents, humans, applications, and MCP servers into one governed registry.
ConnectConnect
Authenticate the agent through the identity platform. Governed calls stay on the brokered path from that point on.
BrokerBroker
Issue scoped, short-lived tokens on demand. The agent never holds the tool's standing secret.
AuthorizeAuthorize
Evaluate each tool call at runtime. Insert human-in-the-loop as dictated by policy.
AuditAudit
Record the agent, accountable human or team, policy, tool, and requested action.
CutCut
Terminate access, throttle requests, or route to human-in-the-loop controls by session, agent, or human.
GOVERNED ACCESS PATHS
Enforce one control model across every access path.
Agent access does not always move through the same transport. Agent Guardian governs brokered tool calls and works with compatible enterprise-managed authorization flows.
MCP gateway
For agent traffic routed through the broker. Inspect, authorize, log, and execute every call inline with credentials the agent never sees.
Enterprise Managed Authorization (EMA)
For agents authenticating directly against enterprise apps through an OAuth-based enterprise authorization flow. Apply the same governance model at authorization time: issue a scoped, time-bound token and log the grant before direct client access.
FAQs
Ready to broker agent access?
Give agents controlled access to the tools they need - without standing secrets, broad service accounts, or untraceable activity.