ArmorIQ Platform Documentation
Complete guide to the ArmorIQ platform - secure your AI agents and MCP servers with intent-aware policy enforcement, cryptographic verification, and a comprehensive management console.
Welcome to ArmorIQ
ArmorIQ is a security-first AI platform that protects your AI agents and MCP (Model Context Protocol) servers through intent-aware policy enforcement, cryptographic verification, and comprehensive tooling.
This documentation covers every feature of the ArmorIQ platform console - from initial sign-up through advanced security configuration.
What You'll Learn
Getting Started
Create your account, verify your email, and set up your first organization.
Architecture
Understand how the platform's services work together - frontend, backend, proxy, and CSRG.
MCP Servers
Register, scan, and monitor your MCP servers for vulnerabilities.
Intent Intelligence
Explore the Intent Assurance Plan (IAP) - execution plans, reasoning graphs, and Merkle verification.
AIQraph
Visualize your agent-server-tool topology in an interactive graph.
Certificates
Issue, monitor, rotate, and revoke TLS certificates for MCP servers and agents.
Plans Governance
Follow a plan's approval lifecycle and its tamper-evident Merkle audit chain.
Policies
Define granular access policies for your agents and MCP servers.
Policy Studio
Author and edit policies with a form-based editor and live YAML preview.
OPA Engine
Monitor and configure Open Policy Agent enforcement analytics.
ArmorPay
Financial compliance policies for AI payment agents - amount thresholds, velocity limits, and transaction controls.
ArmorHealth
Health insurance compliance policies - coverage rules, claims processing, provider networks, and PHI access controls.
ArmorClaw
Detect ArmorClaw installations, scan agent vulnerabilities, and dispatch remediation policies.
API Keys
Generate and manage API keys for SDK integration.
SDK & CLI
Install the CLI, integrate the Python or TypeScript SDK, and make your first authorized tool call.
Observability
Investigate agent sessions, policy decisions, tool activity, model usage, latency, and errors.
API Reference
A grouped map of the backend's authentication modes and controller areas.
Self-Hosting
The container image, required external services, and environment variables for operators.
Platform Overview
ArmorIQ provides a unified console for managing:
| Feature | Description |
|---|---|
| MCP Server Registry | Register, scan, and monitor your MCP servers |
| Agent Registry | Manage AI agents with security scanning |
| Intent Intelligence (IAP) | Intent-aware proxy that intercepts and validates every tool call |
| AIQraph | Interactive graph visualization of agents, servers, tools, and policies |
| Certificates | TLS certificate issuance, expiry monitoring, rotation, and revocation for MCP servers and agents |
| Plans Governance | Plan status lifecycle, human delegation approval, and the Merkle tamper-evident audit chain |
| Policy Engine | Fine-grained access control with visual policy builder and Policy Studio |
| Policy Studio | Form-based policy authoring with live YAML preview |
| OPA Engine | Open Policy Agent integration for context-aware enforcement analytics |
| ArmorPay | Financial compliance product for AI payment agents |
| ArmorHealth | Health insurance compliance product with coverage, claims, and PHI controls |
| ArmorClaw | ArmorClaw installation detection, vulnerability scanning, and remediation |
| API Keys | SDK authentication key management with usage analytics |
| Observability | Organization-scoped sessions, plan traces, policy and tool spans, token usage, cost, latency, and errors |
| Audit Logs | Complete audit trail of all platform activity |
| Quick Scan | Ad-hoc URL vulnerability scanning |
| API Reference | Base URL, auth modes, rate limiting, and a map of the backend's controller areas |
| Self-Hosting | Container image, required external services, and full environment-variable configuration |
Quick Links
- New to ArmorIQ? Start with the Getting Started guide
- Setting up security? Jump to Policies
- Financial compliance? See ArmorPay for payment agent controls
- Health insurance compliance? See ArmorHealth for coverage and claims policies
- Integrating via SDK? Head straight to the SDK & CLI Quickstart - install, log in, make your first authorized tool call in sixty seconds. Need a key first? Create one here.
- Investigating an agent run? Open the Observability overview to follow sessions, traces, spans, token usage, and errors.
- Understanding the architecture? Read the Architecture overview