Skip to content
Join the waitlist

Open integration model for the software delivery estate.

Five interop patterns. One vault. One audit trail. No proprietary lock-in.

Integration Mesh Security architecture
Architecture · Integrations
  1. Connect: Five interop patterns. No proprietary lock-in.
  2. Vault: Per-adapter credential vault · Scoped tokens, short-lived, KMS-encrypted.
  3. Call: MCP · Model Context Protocol clients + servers.
  4. Policy: Allow-list at runtime · Mission scope dictates what an adapter may invoke.; Connector · outside the mission scope, not invoked
  5. Audit: Audit per invocation · Every adapter call hashes into the mission ledger entry.
Uptime
99.98%
Latency
14.2ms
Nodes
128/128

Across the architecture

  • 7 layers · open at every contract
  • mcp · openapi · gRPC · graphql
  • cloud · vpc · air-gap · same control plane
  • cmk / hsm · zero retention by default
  • anthropic · openai · oss · provider-neutral

Five ways in.

Every route in lands in the same mesh, behind one vault and one audit trail.

  • API

    REST and GraphQL adapters with rate-limit awareness.

  • Webhook

    Replay-protected webhook ingestion with signing.

  • MCP

    Model Context Protocol clients + servers.

  • Event stream

    Kafka, NATS, EventHubs adapters.

  • Connector

    Verified first-party connectors for the top 50 systems.

How adapters stay safe.

From the token an adapter carries to the ledger entry its call leaves behind.

One adapter call Sample
Adapter
MCP
Token
scoped, from the vault
Scope check
in mission scope
Ledger
hashed into the mission entry

Security & permissions

  • Per-adapter credential vault

    Scoped tokens, short-lived, KMS-encrypted.

  • Allow-list at runtime

    Mission scope dictates what an adapter may invoke.

  • Replay protection

    Signed webhooks with nonce + timestamp.

  • Audit per invocation

    Every adapter call hashes into the mission ledger entry.

Allow-list at runtime.

Mission scope dictates what an adapter may invoke. Set this mission's scope, then send its calls: calls in scope pass the gate, the rest stop there.

Mission scope
Allow-list gate Sample
Mission ledger Audit per invocation

    API and MCP are in this mission's scope. Send its calls to see the gate decide.

    Start a Software Factory pilot.

    Connect one repository, one ticketing tool, and one mission. See evidence in days, not quarters.

    Book a pilot Join waitlist