Infra

Investing in Keycard

Zane Lackey, Yoko Li, Joel de la Garza, and Malika Aubakirova Posted October 21, 2025

AI agents are emerging as the next computing platform, reshaping how software works at its core. For the first time, systems can act on our behalf. This transformation will redefine how we work across every digital surface. But with it comes a massive new security challenge.

In recent weeks, we’ve already seen AI agents go rogue or leak sensitive data due to weak identity infrastructure – a preview of what happens when autonomy outpaces trust. The digital identity infrastructure we rely on today was built for humans clicking buttons, not for autonomous agents spawning by the thousands, operating across organizations, and requiring new permissions every few seconds. The result is a structural mismatch between how our systems authenticate and how agents actually behave.

Every company experimenting with agents faces the same seemingly wicked trilemma:

  • Make permissions too permissive and risk serious exposure. Giving agents broad access creates massive, unpredictable attack surfaces.
  • Lock down access and stifle innovation. Restricting access makes agents safe but useless.
  • Build custom infrastructure. Burning months of engineering time on brittle, unscalable systems for each new use case.

This is not a new problem. It is the culmination of years of underinvestment in machine identity. AI agents have simply exposed the fragility of an architecture that was never meant to handle autonomy, ephemerality, and delegation at scale.

Keycard is building the missing trust fabric for this new world. Instead of static secrets and API keys, Keycard issues dynamic, identity-bound, task-scoped tokens: cryptographic “keycards” that carry verifiable proof of who the agent is, what it is allowed to do, and for whom. Access is granted and revoked in real time and enforced at runtime, and it always remains fully auditable.. This simple but profound shift, from static identity (who you are) to dynamic intent (what you are doing right now), finally makes safe, autonomous delegation possible.

We have known Ian Livingstone, Keycard’s cofounder and CEO, for a long time. As host of the Infra Pod, Ian has been one of the most thoughtful voices in the infrastructure world. We’ve always admired his ability to see around corners. Alongside Matt Creager, who built and scaled the developer platform at Snyk from $30M to $300M ARR, and Jared Hanson, creator of Passport.js and former Chief Architect at Auth0, the founders combine deep infrastructure experience, a strong sense of developer-first design, and the identity expertise required to build foundational infrastructure for the next era of the internet.

The team is contributing to open standards such as MCP, WIMSE, and OAuth extensions for agents, and has already delivered the first production implementation of OAuth 2.1 Client ID Metadata Documents. By extending open protocols and ensuring interoperability with major platforms like OpenAI, Anthropic, and Microsoft, Keycard is positioning itself as a foundational layer of the agent economy. This is the Auth0 moment for agent access.

We are proud to partner with Ian, Matt, Jared, and the Keycard team as they build the identity layer for the agent economy. This is the missing piece that will finally allow AI agents to move safely from pilot to production.

About the Contributors
Want More a16z Infra?

Analysis and news covering the latest trends reshaping AI and infrastructure.

Learn More
Recommended For You
Growth

new Investing in Mind Robotics

Sarah Wang
Growth

new Investing in Nexthop AI

Raghu Raghuram, Shangda Xu, and Guido Appenzeller
Fintech

new Investing in Lio

Seema Amble, James da Costa, Eric Zhou, and Brian Roberts
Bio + Health

Investing in Ease

Daisy Wolf, Anish Acharya, and Eva Steinman
Infra

Investing in QuiverAI

Yoko Li, Guido Appenzeller, and Martin Casado

Want More Infra?

Analysis and news covering the latest trends reshaping AI and infrastructure.

Sign Up On Substack

Views expressed in “posts” (including podcasts, videos, and social media) are those of the individual a16z personnel quoted therein and are not the views of a16z Capital Management, L.L.C. (“a16z”) or its respective affiliates. a16z Capital Management is an investment adviser registered with the Securities and Exchange Commission. Registration as an investment adviser does not imply any special skill or training. The posts are not directed to any investors or potential investors, and do not constitute an offer to sell — or a solicitation of an offer to buy — any securities, and may not be used or relied upon in evaluating the merits of any investment.

The contents in here — and available on any associated distribution platforms and any public a16z online social media accounts, platforms, and sites (collectively, “content distribution outlets”) — should not be construed as or relied upon in any manner as investment, legal, tax, or other advice. You should consult your own advisers as to legal, business, tax, and other related matters concerning any investment. Any projections, estimates, forecasts, targets, prospects and/or opinions expressed in these materials are subject to change without notice and may differ or be contrary to opinions expressed by others. Any charts provided here or on a16z content distribution outlets are for informational purposes only, and should not be relied upon when making any investment decision. Certain information contained in here has been obtained from third-party sources, including from portfolio companies of funds managed by a16z. While taken from sources believed to be reliable, a16z has not independently verified such information and makes no representations about the enduring accuracy of the information or its appropriateness for a given situation. In addition, posts may include third-party advertisements; a16z has not reviewed such advertisements and does not endorse any advertising content contained therein. All content speaks only as of the date indicated.

Under no circumstances should any posts or other information provided on this website — or on associated content distribution outlets — be construed as an offer soliciting the purchase or sale of any security or interest in any pooled investment vehicle sponsored, discussed, or mentioned by a16z personnel. Nor should it be construed as an offer to provide investment advisory services; an offer to invest in an a16z-managed pooled investment vehicle will be made separately and only by means of the confidential offering documents of the specific pooled investment vehicles — which should be read in their entirety, and only to those who, among other requirements, meet certain qualifications under federal securities laws. Such investors, defined as accredited investors and qualified purchasers, are generally deemed capable of evaluating the merits and risks of prospective investments and financial matters.

There can be no assurances that a16z’s investment objectives will be achieved or investment strategies will be successful. Any investment in a vehicle managed by a16z involves a high degree of risk including the risk that the entire amount invested is lost. Any investments or portfolio companies mentioned, referred to, or described are not representative of all investments in vehicles managed by a16z and there can be no assurance that the investments will be profitable or that other investments made in the future will have similar characteristics or results. A list of investments made by funds managed by a16z is available here: https://a16z.com/investments/. Past results of a16z’s investments, pooled investment vehicles, or investment strategies are not necessarily indicative of future results. Excluded from this list are investments (and certain publicly traded cryptocurrencies/ digital assets) for which the issuer has not provided permission for a16z to disclose publicly. As for its investments in any cryptocurrency or token project, a16z is acting in its own financial interest, not necessarily in the interests of other token holders. a16z has no special role in any of these projects or power over their management. a16z does not undertake to continue to have any involvement in these projects other than as an investor and token holder, and other token holders should not expect that it will or rely on it to have any particular involvement.

With respect to funds managed by a16z that are registered in Japan, a16z will provide to any member of the Japanese public a copy of such documents as are required to be made publicly available pursuant to Article 63 of the Financial Instruments and Exchange Act of Japan. Please contact compliance@a16z.com to request such documents.

For other site terms of use, please go here. Additional important information about a16z, including our Form ADV Part 2A Brochure, is available at the SEC’s website: http://www.adviserinfo.sec.gov.