Library
What Is AI Agent Identity? A Model for Authorizing Real Actions
Learn what an AI agent identity proves, where authentication stops, and how to bind an agent to the exact action a backend will execute.
Authentication, Authorization, and Authority: How to Control Machine Actions
Separate identity, resource access, and exact-action authority so an authenticated machine cannot turn broad access into an unintended effect.
What Is Cryptographic Authorization? From Policy Decision to Enforced Action
Learn how to bind a policy-approved intent to verifiable proof that a backend checks before executing a payment, deployment, certificate, or command.
Intent-Based Authorization for AI Agents: Turning Requests into Enforceable Actions
Learn how to turn an AI agent request into a typed intent that policy can evaluate, proof can cover, and a backend can enforce.
How to Secure AI Agent Tool Calls Before Execution
Choose controls for AI agent tool calls and place TKeeper on the path between a proposed action and its backend effect.
How to Give an AI Agent Signing Access Without Exposing a Private Key
Let an AI agent request signatures through a governed identity that checks typed actions, policy, approvals, and backend verification.
How to Limit Prompt-Injection Damage in AI Agent Workflows
Limit the actions a manipulated AI agent can execute through typed intent, least privilege, policy, approvals, and backend verification.
Human Approval for AI Agent Actions: How Four-Eye Control Works
Require multiple independent approvers to review and sign the exact AI agent action before a protected cryptographic operation continues.
How MPC Distributes AI Agent Signing Risk Across Multiple Nodes
Learn how threshold MPC spreads an AI agent signing identity across t-of-n peers, which failures it contains, and which operational costs it adds.
The Byzantine Generals Problem in Threshold Signing
Learn how a threshold signing system handles peers that fail, withhold messages, or send invalid cryptographic contributions.
What Is ECC Key Refresh? Containing a Partial Peer Compromise
Learn how threshold ECC peers replace compromised shares while preserving the public key and when the incident requires rotation.