Aembit Docs

NEW

Aembit Edge SDKs

Aembit now offers Edge SDKs for TypeScript and Python, so your application can attest its workload and retrieve credentials in a few method calls.

Explore the Edge SDKs

Choose your path

AI Guide

Connect AI agents to protected resources through MCP servers, identity gateways, and OAuth flows—no static credentials required.

MCP Server

Expose Aembit capabilities to AI agents via Model Context Protocol.

OverviewMCP OverviewAI Guide

Identity Gateway

Secure MCP tool calls with workload identity and access policies.

OverviewMCP OverviewAI Guide

Authorization Server

OAuth 2.0 authorization for AI agent credential flows.

ConceptsSetupReference

Aembit MCP Topics

Interesting and helpful topics.

Prompts LibraryMCP OverviewAbout Blended Identities

NEW

Developer Guide

Integrate from code, commands, or infrastructure. Choose how your workload gets credentials at runtime, then how you manage the configuration behind it.

Aembit SDKs

Attest your workload and retrieve credentials from TypeScript or Python.

Edge SDK overviewQuickstartAWS Lambda integration

Aembit APIs

Manage configuration through the Cloud API and retrieve credentials through the Edge API.

Cloud APIEdge APIAuthentication

Aembit CLI

Retrieve credentials in CI/CD pipelines using GitLab, GitHub, or OIDC tokens.

Set up Aembit CLIGetting credentialsCommand reference

Agent Proxy

Intercept your workload's traffic so its source needs no changes.

Integrate through Agent ProxyLocal developmentTest and debug

Get Started

Learn what Aembit does, how workload identity works, and set up your first secure connection.

What is Aembit?Core conceptsQuickstart

User Guide

Deploy Aembit Edge, configure access policies, manage credentials, and monitor workload activity.

Deploy & InstallManage Access PoliciesAudit & Report

Find your focus

Select your role

Security TeamsPlatform EngineersDevelopersIT AdminsExecutives

Control & Audit

Security policies, compliance monitoring, and audit tools

Access Control

Access PoliciesAgentic AI Blended IdentitiesMCP Identity GatewayClient WorkloadsServer WorkloadsTrust ProvidersCredential Providers

Monitoring

Authorization EventsAudit LogsWorkload ActivityLog StreamsDashboard

Compliance

Security ComplianceSecurity PostureGlobal PolicyThreat Model

Quick Actions

Create PolicyView Audit LogGenerate ReportExport Data

Deploy & Scale

Infrastructure deployment, scaling, and operations

Deployment

KubernetesAWS ECS FargateAWS LambdaVM InstallationMCP Identity Gateway Setup

Infrastructure

Terraform ProviderHelm ChartsNetwork ConfigTLS Decrypt

Operations

Log StreamsLog LevelsTroubleshootingChangelog

Reference

Support MatrixArchitectureEnvironment VariablesHelm Chart Options

Build & Integrate

SDKs, APIs, and integration guides for developers

Integration

Developer GuideEdge SDKAgent Proxy IntegrationArchitecture PatternsServer Workload GuidesCLI Get Credentials

APIs

REST API ReferenceCloud APIEdge APIAuthentication

CI/CD

GitHub ActionsGitLab CIJenkins PipelinesCI/CD Overview

AI Integration

AI GuideMCP ServerMCP Authorization ServerMCP Identity GatewayAgentic AI Blended Identities

Manage & Configure

User management, SSO, and tenant configuration

User Management

UsersRolesIdentity ProvidersAgentic AI Blended Identities

Tenant

AdministrationResource SetsSign-On Policy

Security

Audit LogsGlobal Policy

Quick Actions

Add UserConfigure SSO

Overview & Value

High-level insights and business value

Overview

What is AembitHow it WorksUse CasesSecuring AI Agents

Value

Security PostureBusiness Use Cases

Reports

Audit & ComplianceGlobal Policy

Quick Actions

View DashboardGet Started

How Aembit works

AI AgentsMulticloudDatabase Access

Workloads

Identity & Trust

Policy Evaluation

Credential Injection

Learn more

Client WorkloadsServer Workloads

Start building

Configure Client WorkloadsMCP Server setup

Learn more

Blended IdentityTrust Providers

Start building

MCP Authorization Server

Learn more

Access PoliciesAccess Conditions

Start building

Configure Access Policies

Learn more

Credential Providers

Start building

MCP User-Based Access Token

Workloads

Identity Translation

Access Policies

Cross-Cloud Credentials

Learn more

Client WorkloadsServer Workloads

Start building

Deploy Aembit Edge

Learn more

Trust Providers

Start building

AWS Role Trust ProviderAzure Entra WIF Credential Provider

Learn more

Access PoliciesAccess Conditions

Start building

Configure Access Policies

Learn more

Credential Providers

Start building

Azure Entra WIFGCP Workload Identity

Workloads

Cloud IAM Trust

Access Policies

Database Credentials

Learn more

Client WorkloadsServer Workloads

Start building

Configure Client Workloads

Learn more

Trust Providers

Start building

AWS Role Trust Provider

Learn more

Access PoliciesAccess Conditions

Start building

Configure Access Policies

Learn more

Credential Providers

Start building

PostgreSQL guideSnowflake guide