Read-only demo account · Enterprise
The Awesome Company, Inc.
All capabilities enabled · unlimited quotas · 42 active agents · 4 workspaces
Signet · Muster
Muster
Agent-fleet IAM. Muster renders every enrolled agent as a governed node — its cryptographic identity, the mandates that grant it authority, its per-mandate autonomy ceiling (safety level · spend cap · invocation cap with live usage), and a per-mandate kill-switch. It answers the question no human-IAM tool can: which of my agents can act, on whose authority, up to what limit, right now — and can I stop one instantly?
What
Understand and operate Muster
Why it matters
Agent-fleet IAM. Muster renders every enrolled agent as a governed node — its cryptographic identity, the mandates that grant it authority, its per-mandate autonomy ceiling (safety level · spend cap · invocation cap with live usage), and a per-mandate kill-switch. It answers the question no human-IAM tool can: which of my agents can act, on whose authority, up to what limit, right now — and can I stop one instantly?
Enrolled agents
6
Active mandates
7
Governed spend
$84k
Invocations
18.9k
Working demo snapshot
Schema-realistic example records from the fully enabled demo tenant.
The fleet — every agent enrolled to The Awesome Company, with its decentralized identifier, delegation scope, signing algorithm, and how many mandates it currently holds. A deactivated agent keeps its identity for audit but can hold no live authority.
Agent fleet
| Agent | Identity (DID) | Scope | Alg | Mandates | Last seen | Status |
|---|---|---|---|---|---|---|
| Refunds Copilot | did:web:awesome.co:agents:refunds-01 | workspace | EdDSA | 2 | 2m ago | active |
| KYC Verifier | did:web:awesome.co:agents:kyc-verify | workspace | EdDSA | 1 | just now | active |
| Payouts Runner (EU) | did:web:awesome.co:agents:payouts-eu | residency:eu | ES256 | 2 | 11m ago | active |
| Support Triage | did:web:awesome.co:agents:support-triage | workspace | EdDSA | 1 | 1m ago | active |
| Ledger Reconciler | did:web:awesome.co:agents:ledger-recon | workspace | ES256 | 1 | 34m ago | active |
| Promo Blaster | did:web:awesome.co:agents:promo-blast | workspace | EdDSA | 0 | 6d ago | deactivated |
Mandates are the grants of authority. Each pins a safety ceiling (read → mutation → destructive → billing-impacting), the exact set of allowed actions, and hard caps on spend and invocations — with live usage against those caps. A mandate over 80% of a cap is running hot. Any active mandate can be killed instantly; the kill-switch revokes authority and mints a revocation receipt.
Mandates · autonomy ceilings
| Mandate | Agent | Grant | Ceiling | Actions | Spend / cap | Invocations / cap | State |
|---|---|---|---|---|---|---|---|
| mnd_7a3f | Refunds Copilot | Issue refunds ≤ $200 | billing | 4 | $1,240 / $5,000 | 312 / 1,000 | activein 21d |
| mnd_7a40 | Refunds Copilot | Read dispute evidence | read | 6 | — | 1,880 / 5,000 | activein 21d |
| mnd_6b12 | KYC Verifier | Verify identity documents | mutation | 5 | — | 742 / 2,000 | activein 9d |
| mnd_5c88 | Payouts Runner (EU) | Release SEPA payouts ≤ €10k | billing | 3 | €82,400 / €100,000 | 46 / 60 | expiringin 2d |
| mnd_5c89 | Payouts Runner (EU) | Read payout schedule | read | 2 | — | 5,120 / 20,000 | activein 30d |
| mnd_4d21 | Support Triage | Tag & route tickets | mutation | 7 | — | 9,430 / 25,000 | activein 18d |
| mnd_3e77 | Ledger Reconciler | Post reconciliation entries | destructive | 4 | — | 210 / 500 | activein 14d |
| mnd_2f05 | Promo Blaster | Send campaign emails | mutation | 3 | — | 1,200 / 1,200 | revokedrevoked 6d ago |
Enroll an agent, delegate a scoped mandate, and Muster enforces the ceiling on every invocation. Revoke and authority stops at the next call — no redeploy, no key rotation. Every grant and revocation is a signed receipt in the Receipts moat.
This is a representative preview. The live console at /app/muster renders your own enrolled fleet and real mandates, session-scoped to your active workspace.
Product management
Manage Muster
Changes persist in this demo browser only and never call customer APIs.
Product configuration
Set ownership, provider behavior, scope and approval posture for this product.
Feature and policy controls
Choose whether each capability observes, blocks, or enforces matching activity.
Intralock admission
Platform Security · All writes
Human approvals
Risk Operations · Mutation and above
Governance lenses
Compliance · Every production run
Shadow-agent detection
Platform Security · Unknown identities
Settlement escrow
Finance · AP2 mandate required
Continue exploring
Open a related area without leaving the demo account.