One sign-in for your team —
your agents work under it too.

Your team comes in through your identity provider. Agents connect over MCP and the API using the access of the person who started them, with their own identity on every request. Nothing in your org is readable without signing in first, orgs are fully isolated from each other, and every action traces back to the person or agent who took it.