Keycard

1Password is a password, secrets, and access-management platform for securing human, machine, and AI-agent credentials. Its Credential Broker verifies agents and machine workloads at runtime, then provides only the credentials they are authorized to receive. The platform also supports enterprise password management, privileged access with just-in-time and just-enough access, and discovery and auditing of access to AI tools and SaaS applications.

Keycloak is an open-source identity and access management system for applications and services. It provides user federation, strong authentication, user management, fine-grained authorization, and support for identity protocols including OpenID Connect and SAML; in the described agent-security context, agents can be registered as OAuth2 clients. The project can be run from its distribution or Docker image and is licensed under the Apache License 2.0.

Speakeasy is an AI control plane for discovering, securing, and governing enterprise AI agents, MCP servers, Skills, and AI applications. It maintains a catalog of approved AI tools, gives each agent an identity through the organization's existing identity provider, and scopes access by team and role. Every prompt, response, and tool call passes through the control plane for real-time policy checks before reaching internal APIs, MCP servers, or SaaS tools. Policies can distinguish read and write access and individual tools; violations are blocked, while allow-or-deny decisions are recorded in an audit trail. The platform is designed to detect and quarantine unapproved MCP connections and to block threats such as prompt injection, PII exposure, and leaked credentials in flight. Speakeasy deploys through an organization's existing MDM, including Jamf and Intune, and integrates with SAML/OIDC identity providers. The page states that it is SOC 2 Type II audited, ISO 27001 certified, GDPR compliant, and HIPAA ready.

WorkOS Agent Auth is WorkOS’s offering for applications that accept and authorize software agents. It supports an open auth.md file as an access guide for agents, anonymous operation before a person claims an agent’s work, and ID-JAG identity assertions that let an agent provider vouch for the user without a separate signup form. Applications can issue an agent its own scoped token, allowing that access to be audited, limited, and revoked independently of the user’s access.

Runlayer is an AI control and enablement platform for companies deploying agents across teams and AI clients. It provides a governed MCP gateway, a catalog of MCPs, skills, and plugins, identity and permission controls, agent-session visibility, spend monitoring, and runtime security checks for tool calls, outputs, intent, and sensitive data. Runlayer distributes approved tools and reusable agent capabilities across clients, packages internal APIs, workflows, and company knowledge, and can create governed AI coworkers with scoped MCPs, skills, memory, triggers, and permissions. The company also describes distilling reusable skills from successful and failed agent traces so that hard-won procedures can be shared across agents; the video presents this as a way to improve task performance while guarding against risks such as prompt injection, PII exposure, unmanaged agents, and unapproved MCPs.