Skip to content

Your company’s CLI.Built for AI agents.

A reference implementation of ID-JAG and DPoP-bound OAuth grants for AI agents accessing company APIs.

Weldall explained.

Weldall is a central access layer between AI agents and your company’s capabilities.

Every single sign-on (SSO) provider is supported. An agent can only trigger what the employee is authorised for.

No agent and no human can ever see or lose API tokens or passwords.

Live demo — try Weldall yourself: scoped API access for AI agents

Your agent’s entry pointto your company.

In this example, we ask the agent to prepare us for a call with a customer. It uses weldall request to find contracts, a due invoice, and the vacationing account manager’s handover—then adds their points to our notes.

Compatible with any agent on:

  • macOS
  • Windows
  • Linux

Works with any agent that can run a CLI.

Use Pi, OpenWork, Claude Code, or Copilot to access your company’s APIs. Manage permissions centrally with Weldall.

Built on top of industry standards.

“Don’t roll your own crypto” is a well-known adage among developers. This is why Weldall uses industry-standard extensions of OAuth. A central server issues ID-JAGs for each registered service, and DPoP binds every token issued to the CLI to a key in the user’s keychain.

ID-JAG explained — one login, access to every company API

Identity Assertion JWT Authorization Grant

The IETF draft that carries a single sign-in down a trust chain.

DPoP explained — why an access token must not be a password

Demonstrating Proof of Possession

The mechanism (RFC 9449) that makes a token worthless to anyone without the matching key.

Your company’s CLI starts here.

Bring an existing service or an app your team just built. Let’s make it accessible to your agents.