# Aembit Docs

> Attest. Authenticate. Accelerate.

Attest. Authenticate. Accelerate.

- [Quickstart](/get-started/quickstart/)

NEW

## Aembit Edge SDKs

Aembit now offers Edge SDKs for TypeScript and Python, so your application can attest its workload and retrieve credentials in a few method calls.

[Explore the Edge SDKs](/dev-guide/sdk/edge/)

## Choose your path

### [AI Guide](/ai-guide/)

Connect AI agents to protected resources through MCP servers, identity gateways, and OAuth flows—no static credentials required.

[MCP Server](/ai-guide/mcp/mcp-server/)

Expose Aembit capabilities to AI agents via Model Context Protocol.

[Overview](/ai-guide/mcp/mcp-server/)[MCP Overview](/ai-guide/mcp/)[AI Guide](/ai-guide/)

[Identity Gateway](/ai-guide/mcp/identity-gateway/)

Secure MCP tool calls with workload identity and access policies.

[Overview](/ai-guide/mcp/identity-gateway/)[MCP Overview](/ai-guide/mcp/)[AI Guide](/ai-guide/)

[Authorization Server](/ai-guide/mcp/authorization-server/)

OAuth 2.0 authorization for AI agent credential flows.

[Concepts](/ai-guide/mcp/authorization-server/concepts-mcp-auth-server)[Setup](/ai-guide/mcp/authorization-server/setup-mcp-auth-server)[Reference](/ai-guide/mcp/authorization-server/reference-mcp-auth-server)

[Aembit MCP Topics](/ai-guide/)

Interesting and helpful topics.

[Prompts Library](/ai-guide/prompt-library/)[MCP Overview](/ai-guide/mcp/)[About Blended Identities](/ai-guide/blended-identity/)

NEW

### [Developer Guide](/dev-guide/)

Integrate from code, commands, or infrastructure. Choose how your workload gets credentials at runtime, then how you manage the configuration behind it.

[Aembit SDKs](/dev-guide/sdk/edge/)

Attest your workload and retrieve credentials from TypeScript or Python.

[Edge SDK overview](/dev-guide/sdk/edge/)[Quickstart](/dev-guide/sdk/edge/quickstart/)[AWS Lambda integration](/dev-guide/sdk/edge/integrations/aws-lambda)

[Aembit APIs](/dev-guide/api/)

Manage configuration through the Cloud API and retrieve credentials through the Edge API.

[Cloud API](/dev-guide/api/cloud/)[Edge API](/dev-guide/api/edge/)[Authentication](/dev-guide/api/edge/auth/)

[Aembit CLI](/dev-guide/cli/)

Retrieve credentials in CI/CD pipelines using GitLab, GitHub, or OIDC tokens.

[Set up Aembit CLI](/dev-guide/cli/usage/setup)[Getting credentials](/dev-guide/cli/usage/get-credentials)[Command reference](/dev-guide/cli/reference/)

[Agent Proxy](/dev-guide/integration/agent-proxy)

Intercept your workload's traffic so its source needs no changes.

[Integrate through Agent Proxy](/dev-guide/integration/agent-proxy)[Local development](/dev-guide/integration/local-development)[Test and debug](/dev-guide/integration/testing)

### [Get Started](/get-started/)

Learn what Aembit does, how workload identity works, and set up your first secure connection.

[What is Aembit?](/get-started/)[Core concepts](/get-started/concepts/)[Quickstart](/get-started/quickstart/)

### [User Guide](/user-guide/)

Deploy Aembit Edge, configure access policies, manage credentials, and monitor workload activity.

[Deploy & Install](/user-guide/deploy-install/)[Manage Access Policies](/user-guide/access-policies/)[Audit & Report](/user-guide/audit-report/)

## Find your focus

Select your role

Security TeamsPlatform EngineersDevelopersIT AdminsExecutives

### Control & Audit

Security policies, compliance monitoring, and audit tools

#### Access Control

[Access Policies](/user-guide/access-policies/)[Agentic AI Blended Identities](/ai-guide/blended-identity/)[MCP Identity Gateway](/ai-guide/mcp/identity-gateway/)[Client Workloads](/user-guide/access-policies/client-workloads/)[Server Workloads](/user-guide/access-policies/server-workloads/)[Trust Providers](/user-guide/access-policies/trust-providers/)[Credential Providers](/user-guide/access-policies/credential-providers/)

#### Monitoring

[Authorization Events](/user-guide/audit-report/access-authorization-events)[Audit Logs](/user-guide/audit-report/audit-logs)[Workload Activity](/user-guide/audit-report/workload-events)[Log Streams](/user-guide/administration/log-streams/)[Dashboard](/user-guide/audit-report/)

#### Compliance

[Security Compliance](/get-started/security-posture/security-compliance)[Security Posture](/get-started/security-posture/)[Global Policy](/user-guide/administration/global-policy/)[Threat Model](/get-started/security-posture/threat-model)

#### Quick Actions

[Create Policy](/user-guide/access-policies/)[View Audit Log](/user-guide/audit-report/audit-logs)[Generate Report](/user-guide/audit-report/)[Export Data](/dev-guide/api/)

### Deploy & Scale

Infrastructure deployment, scaling, and operations

#### Deployment

[Kubernetes](/user-guide/deploy-install/kubernetes/)[AWS ECS Fargate](/user-guide/deploy-install/serverless/aws-ecs-fargate)[AWS Lambda](/user-guide/deploy-install/serverless/)[VM Installation](/user-guide/deploy-install/virtual-machine/)[MCP Identity Gateway Setup](/ai-guide/mcp/identity-gateway/setup-mcp-gateway/)

#### Infrastructure

[Terraform Provider](/user-guide/access-policies/advanced-options/terraform/terraform-configuration/)[Helm Charts](/user-guide/deploy-install/kubernetes/)[Network Config](/user-guide/deploy-install/)[TLS Decrypt](/user-guide/deploy-install/advanced-options/tls-decrypt/)

#### Operations

[Log Streams](/user-guide/administration/log-streams/)[Log Levels](/user-guide/deploy-install/advanced-options/changing-agent-log-levels)[Troubleshooting](/user-guide/troubleshooting/)[Changelog](/changelog/)

#### Reference

[Support Matrix](/reference/support-matrix/)[Architecture](/get-started/how-aembit-works)[Environment Variables](/reference/edge-components/edge-component-env-vars)[Helm Chart Options](/reference/edge-components/helm-chart-config-options)

### Build & Integrate

SDKs, APIs, and integration guides for developers

#### Integration

[Developer Guide](/dev-guide/)[Edge SDK](/dev-guide/sdk/edge/)[Agent Proxy Integration](/dev-guide/integration/agent-proxy/)[Architecture Patterns](/user-guide/access-policies/server-workloads/architecture-patterns)[Server Workload Guides](/user-guide/access-policies/server-workloads/guides/)[CLI Get Credentials](/dev-guide/cli/usage/get-credentials)

#### APIs

[REST API Reference](/dev-guide/api/)[Cloud API](/dev-guide/api/cloud/)[Edge API](/dev-guide/api/edge/)[Authentication](/dev-guide/api/edge/auth/)

#### CI/CD

[GitHub Actions](/user-guide/deploy-install/ci-cd/github/)[GitLab CI](/user-guide/deploy-install/ci-cd/gitlab/)[Jenkins Pipelines](/user-guide/deploy-install/ci-cd/jenkins-pipelines)[CI/CD Overview](/user-guide/deploy-install/ci-cd/)

#### AI Integration

[AI Guide](/ai-guide/)[MCP Server](/ai-guide/mcp/mcp-server/)[MCP Authorization Server](/ai-guide/mcp/authorization-server/)[MCP Identity Gateway](/ai-guide/mcp/identity-gateway/)[Agentic AI Blended Identities](/ai-guide/blended-identity/)

### Manage & Configure

User management, SSO, and tenant configuration

#### User Management

[Users](/user-guide/administration/users/)[Roles](/user-guide/administration/roles/)[Identity Providers](/user-guide/administration/identity-providers/)[Agentic AI Blended Identities](/ai-guide/blended-identity/)

#### Tenant

[Administration](/user-guide/administration/)[Resource Sets](/user-guide/administration/resource-sets/)[Sign-On Policy](/user-guide/administration/sign-on-policy/)

#### Security

[Audit Logs](/user-guide/audit-report/audit-logs)[Global Policy](/user-guide/administration/global-policy/)

#### Quick Actions

[Add User](/user-guide/administration/users/add-user)[Configure SSO](/user-guide/administration/identity-providers/)

### Overview & Value

High-level insights and business value

#### Overview

[What is Aembit](/get-started/)[How it Works](/get-started/how-aembit-works)[Use Cases](/get-started/use-cases/)[Securing AI Agents](/get-started/use-cases/ai-agents/)

#### Value

[Security Posture](/get-started/security-posture/)[Business Use Cases](/get-started/use-cases/)

#### Reports

[Audit & Compliance](/user-guide/audit-report/)[Global Policy](/user-guide/audit-report/global-policy)

#### Quick Actions

[View Dashboard](/user-guide/audit-report/)[Get Started](/get-started/)

## How Aembit works

AI AgentsMulticloudDatabase Access

WorkloadsIdentity & TrustPolicy EvaluationCredential Injection

#### Learn more

[Client Workloads](/get-started/concepts/client-workloads/)[Server Workloads](/get-started/concepts/server-workloads/)

#### Start building

[Configure Client Workloads](/user-guide/access-policies/client-workloads/)[MCP Server setup](/ai-guide/mcp/mcp-server/)

#### Learn more

[Blended Identity](/ai-guide/blended-identity/)[Trust Providers](/get-started/concepts/trust-providers/)

#### Start building

[MCP Authorization Server](/ai-guide/mcp/authorization-server/)

#### Learn more

[Access Policies](/get-started/concepts/access-policies/)[Access Conditions](/get-started/concepts/access-conditions/)

#### Start building

[Configure Access Policies](/user-guide/access-policies/)

#### Learn more

[Credential Providers](/get-started/concepts/credential-providers/)

#### Start building

[MCP User-Based Access Token](/user-guide/access-policies/credential-providers/mcp-user-based-access-token/)

![AI Agents architecture diagram](/diagrams/use-case-explorer/ai-agents/base.svg)![AI Agents - Workloads highlighted](/diagrams/use-case-explorer/ai-agents/workloads.svg)![AI Agents - Identity & Trust highlighted](/diagrams/use-case-explorer/ai-agents/identity.svg)![AI Agents - Policy Evaluation highlighted](/diagrams/use-case-explorer/ai-agents/policy.svg)![AI Agents - Credential Injection highlighted](/diagrams/use-case-explorer/ai-agents/credentials.svg)

WorkloadsIdentity TranslationAccess PoliciesCross-Cloud Credentials

#### Learn more

[Client Workloads](/get-started/concepts/client-workloads/)[Server Workloads](/get-started/concepts/server-workloads/)

#### Start building

[Deploy Aembit Edge](/user-guide/deploy-install/)

#### Learn more

[Trust Providers](/get-started/concepts/trust-providers/)

#### Start building

[AWS Role Trust Provider](/user-guide/access-policies/trust-providers/aws-role-trust-provider/)[Azure Entra WIF Credential Provider](/user-guide/access-policies/credential-providers/azure-entra-workload-identity-federation/)

#### Learn more

[Access Policies](/get-started/concepts/access-policies/)[Access Conditions](/get-started/concepts/access-conditions/)

#### Start building

[Configure Access Policies](/user-guide/access-policies/)

#### Learn more

[Credential Providers](/get-started/concepts/credential-providers/)

#### Start building

[Azure Entra WIF](/user-guide/access-policies/credential-providers/azure-entra-workload-identity-federation/)[GCP Workload Identity](/user-guide/access-policies/credential-providers/google-workload-identity-federation/)

![Multicloud architecture diagram](/diagrams/use-case-explorer/multicloud/base.svg)![Multicloud - Workloads highlighted](/diagrams/use-case-explorer/multicloud/workloads.svg)![Multicloud - Identity Translation highlighted](/diagrams/use-case-explorer/multicloud/identity.svg)![Multicloud - Access Policies highlighted](/diagrams/use-case-explorer/multicloud/policy.svg)![Multicloud - Cross-Cloud Credentials highlighted](/diagrams/use-case-explorer/multicloud/credentials.svg)

WorkloadsCloud IAM TrustAccess PoliciesDatabase Credentials

#### Learn more

[Client Workloads](/get-started/concepts/client-workloads/)[Server Workloads](/get-started/concepts/server-workloads/)

#### Start building

[Configure Client Workloads](/user-guide/access-policies/client-workloads/)

#### Learn more

[Trust Providers](/get-started/concepts/trust-providers/)

#### Start building

[AWS Role Trust Provider](/user-guide/access-policies/trust-providers/aws-role-trust-provider/)

#### Learn more

[Access Policies](/get-started/concepts/access-policies/)[Access Conditions](/get-started/concepts/access-conditions/)

#### Start building

[Configure Access Policies](/user-guide/access-policies/)

#### Learn more

[Credential Providers](/get-started/concepts/credential-providers/)

#### Start building

[PostgreSQL guide](/user-guide/access-policies/server-workloads/guides/aws-postgres/)[Snowflake guide](/user-guide/access-policies/server-workloads/guides/snowflake/)

![Database Access architecture diagram](/diagrams/use-case-explorer/database/base.svg)![Database Access - Workloads highlighted](/diagrams/use-case-explorer/database/workloads.svg)![Database Access - Cloud IAM Trust highlighted](/diagrams/use-case-explorer/database/identity.svg)![Database Access - Access Policies highlighted](/diagrams/use-case-explorer/database/policy.svg)![Database Access - Database Credentials highlighted](/diagrams/use-case-explorer/database/credentials.svg)