ThirdKey — Zero Trust for AI

Securing the agentic future.

ThirdKey ships the trust infrastructure enterprise security teams need to deploy autonomous agents — identity, schema verification, tool contracts, and a policy-governed runtime your CISO can sign off on.

001 / Products

Four primitives.

Each one is open, interoperable, and self-contained. Adopt one or the whole stack — the trust model travels with the artifact.

/01

Symbiontsame agent. secure runtime.

A Rust-native, policy-governed runtime for executing agents and tools in production. Cedar authorization, cryptographic tool verification, sandboxed execution, and tamper-evident audit — for agents you deploy against sensitive data.

Cedar AuthZ Sandboxed Audit-log MCP gateway
symbiont.dev →
/02

SchemaPin 🧷verify before you trust.

Cryptographic schema verification for AI agents and MCP servers. Prevent “MCP Rug Pull” attacks with ECDSA signatures, .well-known DNS-anchored trust, and TOFU key pinning.

.well-known/schemapin.jsonDISCOVERY
// ECDSA P-256 public key, pinned by clients on first contact
{
  "schema_version": "1.3",
  "developer_name": "Example Corp",
  "public_key_pem": "-----BEGIN PUBLIC KEY-----\n…\n-----END PUBLIC KEY-----",
  "revoked_keys": [],
  "revocation_endpoint": "https://example.com/.well-known/schemapin-revocations.json"
}
schemapin.org →
/03

AgentPin 🪪identity, anchored.

Domain-anchored cryptographic identity for AI agents. Issue short-lived ES256 credentials, verify with a 12-step protocol, and enforce capability-scoped access — anchored to your domain.

ES256 creds 12-step verify Capability scoped Domain anchored
agentpin.org →
/04

ToolClad 🔧contracts for tools.

Declarative tool interface contracts for agentic runtimes. A single .clad.toml manifest defines typed parameters, validation, invocation, output parsing, and Cedar policy — across CLI, sessions, and governed browser execution.

.clad.toml Typed I/O Cedar policy Oneshot · session · browser
toolclad.org →
What an agent can do is a research problem. What it should do is an infrastructure problem.
— Field notes from production deployments
002 / Research

Mission & research.

Our mission is to augment human ingenuity through intelligent tools and AI. We are exploring the frontiers of artificial intelligence, from foundational models and reinforcement learning to applied AI safety.

research.thirdkey.ai →