NewGenerally available today

Your agents already have capability. Give them permission.

The Realm9 MCP Server lets any coding agent request infrastructure the way a person does — through an approval, against a quota, under a budget, with a lease that expires. It hands out grants, never credentials.

Works with what you already run

Claude Code, Cursor, Windsurf, GitHub Copilot agents, and any custom pipeline that speaks the Model Context Protocol.

No static credentials

An agent never holds a long-lived key. It holds a lease with a scope, a ceiling and an expiry that Realm9 can revoke in one call.

One line to install

Point your agent at your own Realm9 control plane. Nothing leaves your network unless you decide it should.

The problem nobody has solved yet

Every vendor is racing to give agents more capability — sandboxes, code generation, autonomous remediation. Almost nobody is giving organisations control over what those agents are allowed to consume.

Today an agent runs as a service account with a static credential and an unlimited blast radius. Tomorrow you will have hundreds of them. Realm9 makes each one a named principal with a quota, a budget, a scope and an audit trail — enforced at the moment of request.

  • Policy evaluated in milliseconds, so the agent is not waiting on a human for routine work
  • Budget ceilings that stop spend before it happens, not alert on it afterwards
  • Human escalation only where the policy says it is warranted
  • Every tool call written to the same ledger as every human request
Connection · agent/pr-reviewer
Endpointr9.acme.internal/mcp
AuthOIDC
Tools exposed to the agent
env.request / env.extend / env.release
book, renew and release environments within budget
infra.plan
dry-run, never applies
infra.apply
policy-gated
gpu.lease
fair-share queue
cost.query / ledger.write
read own spend, automatic ledger entry

A request, end to end

agent/pr-reviewer → env.request (ephemeral, ttl 2h, verify PR #4412)
Identity: agent/pr-reviewer
owner @t.nakamura
Quota: 14 of 40 concurrent leases used
Budget: $212 of $2,000 monthly ceiling
Policy: ephemeral-auto
approved without human review · scope: eu-west-1, non-production, no data-class-A
Lease r9-lse-9271 granted
expires 14:22 UTC · est. $3.80
highagent/pr-reviewer → infra.apply { workspace: prod-db }
ResultDenied — policy "agent-no-production"
Escalation@platform-leads can override

Logged as r9-aud-55190.

Deny is a feature

The denial is as valuable as the grant. It is recorded, attributable, and tells you exactly which policy fired and who can override it.

Revoke in one call

An agent behaving badly is not a credential rotation exercise. Suspend the principal and every active lease it holds is reclaimed.

Runs where you run

Self-hosted by default. Your policy, your ledger, your network. Nothing about your estate is sent anywhere you did not choose.

Put a policy engine between your agents and your infrastructure

The MCP Server ships with every Realm9 plan, including the free self-hosted tier.