Drawbridge

Identity, secrets, and passwordless SSH provisioning for AI agents — Keycloak, vault, MCP tools.

Hosted
SSEofficialinfra

Deployment

Hosted
ssehttps://api.drawbridge.xorfox.sh/mcp/sse
Headers
AuthorizationRequired
Bearer <access_token>. To mint a token without a human in the loop: (1) POST {"agentName":"<name>","agentEmail":"<principal-email>"} to https://api.drawbridge.xorfox.sh/drawbridge/mcp/register — returns clientId, clientSecret, tokenEndpoint. (2) POST grant_type=client_credentials with those credentials to the token endpoint. The resulting access_token is scoped mcp:tools and audience-bound to /mcp; default TTL is 5 minutes, so refresh on the boundary.