MACAW
ConsoleGet started

Integrations

Plugs into what you already run.

MACAW makes the tools you’ve already invested in do more: your identity provider, your observability stack, your models and agent frameworks. Nothing to replace.

Get startedTalk to us

What you operate

IdentityOktaMicrosoft Entra IDAuth0Google Workspace
ObservabilityDatadogSplunkGrafanaOpenTelemetry
Keys and storageKey managementAmazon S3Elasticsearch

MACAW

one policy · one identity · one record

What you build with

ModelsOpenAIAnthropicLiteLLM
FrameworksLangChainPydantic AIYour own SDK
Coding agents and MCPClaude CodeCodexSnowflakeGitHub

For IT, security and platform teams.

MACAW federates with the identity, observability and security systems you already run.

Identity Bridge

Federated identity and canonical claims mapping.

  • Any identity provider maps to one identity, so a policy is written once and works with all of them.
  • Switch providers with a configuration change, not code.
  • The person’s identity travels, signed, through every agent, tool and model call.
  • Approvals can require a passkey or hardware key.
How Identity Bridge works
  • Okta
  • Microsoft Entra ID
  • Auth0
  • Google Workspace
  • Keycloak
  • Any OIDC provider
Identity Bridgeclaims mapper
One identityorg · team · role · useryour policies, written once

OpenTelemetry

Telemetry with zero instrumentation.

  • Every decision, allowed or denied, exported with no code changes.
  • Each request is followed across agents, tools and model calls.
  • Send to several destinations at once.
  • Signed, hash-chained audit records for your SIEM.
Observability in depth
One requestagenttool callmodel call · denied
  • Datadog
  • Splunk
  • Grafana / Tempo
  • Jaeger
  • New Relic
  • Elastic
  • Any OTEL endpoint

Enterprise

Runs on the infrastructure you’ve already approved.

MACAW uses your keys, your secrets manager, your audit sinks and your policy store, deployed where you choose.

Talk to us about Enterprise
MACAW control planepolicy · identity · approvals · signed record
Deployment
  • Hosted
  • AWS
  • Microsoft Azure
  • Google Cloud
  • Kubernetes
  • On-prem container
Identity and access
  • Okta
  • Microsoft Entra ID
  • Auth0
  • Google Workspace
  • Keycloak
  • SAML
  • SCIM
Key management
  • AWS KMS
  • Azure Key Vault
  • Google Cloud KMS
Secrets
  • HashiCorp Vault
  • AWS Secrets Manager
Audit and SIEM
  • Splunk HEC
  • Elasticsearch
  • Amazon S3
  • Amazon CloudWatch
  • Syslog
  • OpenTelemetry
Policy store
  • PostgreSQL
  • MySQL
  • Amazon S3

Configurable on the Enterprise plan. Free and SaaS plans run on MACAW-managed keys and storage.

Plug and play with your enterprise observability and SIEM stack.

Compliance · 3:57

Every decision leaves evidence

Apps built on different frameworks call models through the MACAW SDK. Each request is traced with the policy decisions made along the way.

  • Requests from OpenAI and Pydantic AI apps side by side
  • Policy resolution and fetch events inside each request
  • Allowed and denied calls with the reason for each
All use cases

For developers.

Drop-in support for the models, frameworks and agents your teams build with.

Models

  • OpenAI
  • Anthropic
  • LiteLLM, 100+ providers

One policy on every model call, whichever provider.

SecureAI adapters

Frameworks

  • LangChain
  • Pydantic AI
  • Your own, on the SDK

CrewAI, AutoGen, LlamaIndex and Haystack on request.

Find your adapter

Coding agents

  • Claude Code
  • Codex

A plugin for each, with the MAPL skill built in.

Coding agents

Need an integration that isn’t listed?

Tell us what you run and we’ll connect it.

Talk to us