Turn platform credentials into scoped WIMSE JWTs, kill compromised access in milliseconds, and verify agent tool calls — on one fabric.
Starfly is the policy enforcement point for agent workloads: RFC 8693 token exchange, audience-bound MCP verification, CAEP revocation, and federation sync — without replacing your identity provider.
Clone the repo, run make build-dev, and exchange your first
WIMSE JWT in under 15 minutes. Docs, sandbox proofs, and runnable Go
code live in this repository.