Skip to main content

Keycard Acquires Anchor.dev to Unlock Autonomous Coding Agents

Written by Customer Service on . Posted in Mergers And Acquisitions.

Developer and Security Teams No Longer Have to Make Tradeoffs Between the Autonomy, Capability and Security of Coding Agents

SAN FRANCISCO, Feb. 10, 2026 (GLOBE NEWSWIRE) — Keycard, the provider of the identity and access platform for AI agents, today announced that it has acquired Anchor.dev to extend its platform to govern coding agents. Anchor.dev was a stealth startup focused on making certificate issuance and validation automatic; the team has deep expertise in building infrastructure that developers trust at companies like Cloudflare, GitHub and Heroku.

Ian Livingstone, co-founder and CEO of Keycard, said: “Security shouldn’t be something developers have to think about, it should just work. Keycard’s focus on agent identity combined with Anchor’s experience in developer infrastructure puts us in a unique position to help unlock the potential of autonomous coding agents.”

AI coding agents such as Cursor, Claude Code, Codex and Windsurf are shipping production software but their capabilities and autonomy are constrained by the ability to govern them. Most organizations rely on static credentials and human approvals for every tool call which makes real autonomy impossible. Existing vendor approaches either constrain agents’ natural capabilities to a narrow set of MCP-only workflows or apply controls at the wrong layer or point in time, such as at the network boundary or during initial authentication. None of these can govern what an agent does once it is running without drastically limiting either the agent’s capabilities, autonomy or the scope of what can be governed. 

With this acquisition, Keycard eliminates the need for this tradeoff by evaluating policy on each tool call at the application layer. New capabilities of Keycard’s identity and access platform for AI agents will include: 

  • Application-layer policy enforcement at runtime: Policy is evaluated per task and per tool call, where agents actually execute actions, rather than at login, the network boundary or through protocol-specific proxies.
  • Protocol-agnostic support for the full agent toolchain: Agent behavior is governed consistently across MCP workflows, CLI commands, APIs and agent-generated tools, enabling the long tail of applications and patterns used in modern software development.
  • Explicit tool governance with full visibility: Teams define which tools an agent is allowed to use, and every tool invocation, successful or failed, is evaluated, logged and attributed to a specific agent and task with support for additional metadata.
  • Identity-bound, task-scoped credentials: Static secrets are replaced with short-lived credentials issued per task and cryptographically bound to the agent, their delegates and the application being accessed.
  • Portable agent configuration across environments: Agents are configured once and can be used across laptops, sandboxes and production systems without reconfiguration, using cryptographically attested runtime context.
  • Autonomous workflows with built-in guardrails: Routine actions proceed without human involvement, while sensitive operations can still require explicit approval, enabling autonomy without sacrificing security or control.

“At Anchor, we focused on removing operational complexity from certificates: automatic issuance, validation and renewal,” said Wesley Beary, former CEO of Anchor.dev, now at Keycard. “At Keycard, we’re applying that same discipline to coding agents: real identity, scoped access, policy enforcement per action and full visibility. That’s what makes autonomous coding practical in production.”

Keycard’s identity and access platform identifies AI agents, lets users assign task-based permissions and dynamically enforces policy while tracking all activity. With Keycard, organizations can deploy AI agents into production with governed access, knowing they are only capable of performing the intended actions of their users and builders without limiting the tasks they can perform. Teams can get started quickly by adopting agents and supplying them with tools through one-click installation, while developers can build and publish their own agents and tools using Keycard’s drop-in SDKs.

About Keycard
Keycard’s mission is to unlock the power of AI agents by giving developers and enterprises the foundations they need to build and adopt trusted agentic applications at scale. Its identity and access platform provides real-time, contextual guardrails, enabling the transition from static, human-driven workflows to machine-driven, autonomous, agentic applications. Keycard is a remote-first company and backed by Andreessen Horowitz, boldstart ventures and Acrew Capital. For more information, visit: https://www.keycard.ai/.

Media and Analyst Contact:
Amber Rowland
amber@therowlandagency.com
+1-650-814-4560

Disclaimer & Cookie Notice

Welcome to GOLDEA services for Professionals

Before you continue, please confirm the following:

Professional advisers only

I am a professional adviser and would like to visit the GOLDEA CAPITAL for Professionals website.

Important Notice for Investors:

The services and products offered by Goldalea Capital Ltd. are intended exclusively for professional market participants as defined by applicable laws and regulations. This typically includes institutional investors, qualified investors, and high-net-worth individuals who have sufficient knowledge, experience, resources, and independence to assess the risks of trading on their own.

No Investment Advice:

The information, analyses, and market data provided are for general information purposes only and do not constitute individual investment advice. They should not be construed as a basis for investment decisions and do not take into account the specific investment objectives, financial situation, or individual needs of any recipient.

High Risks:

Trading in financial instruments is associated with significant risks and may result in the complete loss of the invested capital. Goldalea Capital Ltd. accepts no liability for losses incurred as a result of the use of the information provided or the execution of transactions.

Sole Responsibility:

The decision to invest or not to invest is solely the responsibility of the investor. Investors should obtain comprehensive information about the risks involved before making any investment decision and, if necessary, seek independent advice.

No Guarantees:

Goldalea Capital Ltd. makes no warranties or representations as to the accuracy, completeness, or timeliness of the information provided. Markets are subject to constant change, and past performance is not a reliable indicator of future results.

Regional Restrictions:

The services offered by Goldalea Capital Ltd. may not be available to all persons or in all countries. It is the responsibility of the investor to ensure that they are authorized to use the services offered.

Please note: This disclaimer is for general information purposes only and does not replace individual legal or tax advice.