Railpane is the control plane for autonomous agents: every consequential action passes identity, policy, and human approval — with a signed receipt proving why it was allowed.
Agents authenticate. Railpane evaluates identity, delegated authority, and policy — then allows, denies, or routes to a human.
Temporary credentials are brokered per task. Every outcome lands in a signed receipt that links evidence, policy, and result.
How authorization works →# authorize a production deploy
curl https://railpane.com/v1/actions \
-H "Authorization: Bearer $AGENT_TOKEN" \
-d '{"tool":"deploy","operation":"production",
"task":"task_ship_042"}'
# → REQUIRE_APPROVAL (policy prod-guard v3)from railpane import Client
client = Client(token="st_...")
decision = client.actions.create(
tool="deploy", operation="production",
task="task_ship_042",
)
assert decision.kind == "REQUIRE_APPROVAL"client := railpane.New(os.Getenv("RAILPANE_TOKEN"))
decision, err := client.Actions.Create(ctx, railpane.Action{
Tool: "deploy", Operation: "production",
Task: "task_ship_042",
})
// decision.Kind == REQUIRE_APPROVALThe control plane connecting them. Each engine stays useful standalone — Railpane's value is the trust layer between them.
Identity, delegated authority, and versioned policy decide every action — with approvals where humans are required.
Temporary scoped credentials per task. Host sandboxing, MCP governance, and execution bound to the exact approved digest.
Signed receipts chaining evidence, policy version, approval, and result — verifiable without Railpane software.
One control plane across every agent workload.
Scope-checked diffs, secret-safe runs, human review exactly where risk demands it.
Production deploys that require approval, with temporary cloud credentials and full audit.
Refunds and account actions inside auto-limits; anything above routes to a human with evidence.
Transaction ceilings, saga compensation, and tamper-evident money trails.
Scoped sessions, credential brokering, and replays bound to the approved action.
Least-privilege cloud actions with per-task credentials and revocation.
Join the $500/mo pilot: your agent workflow governed in two weeks, with integration help and roadmap influence.
Open-source engines, CLI, desktop app, and API documentation. Local-first, self-hostable, no account wall.
Pilots are open. Leave your work email plus one line on what your agents touch, and we will reach out within two business days.