Getting started
Running PEP and your first WIMSE JWT in 15 minutes — no cluster required.
Starfly documentation
This content is for v1.0. Switch to the latest version for up-to-date documentation.
Starfly secures agents without replacing your IdP — turn platform credentials into scoped WIMSE JWTs, kill compromised access in milliseconds, and verify tool calls on one fabric.
Concepts
How exchange, revocation, and trust domains work — and why the hot path stays fast.
Ecosystem
Starfly is the PEP — companions sense, remember, relay, and judge. All optional.
Glossary
Trust domain vs audience, PEP, UTC, and every term the dashboard AI bar uses.
Integrators
Wire agents, tools, and ops surfaces — exchange, credential patterns, MCP, UTC, dashboard, graph.
Playground
Step through sandbox scenarios with screenshots — exchange, revocation, federation, MCP.
Terraform
Declare fabrics, tools, and agent identity as code.
API reference
RFC 8693 exchange, MCP verify, signals, federation — generated from OpenAPI.
Fabric invariants
Section titled “Fabric invariants”- Exchange stays fast — no new synchronous dependencies on the token exchange pipeline.
- Revocation stays fast — kill-switch propagation latency is not negotiable.
Async surfaces (dashboard, graph, UTC) observe the fabric — they never block exchange or revocation.