# Lys

Identity, permission and verifiable records for people, agents and the services they use.

Lys gives people and agents identities, decides access through grants, and records agent execution. Its cryptographic library and CLI also produce artifacts that other parties can verify independently.

## Choose a starting point

[Getting started](/lys/getting-started/)

Connect to an existing service and inspect how an agent is configured.
[Concepts](/lys/concepts/)

Identities, grants, seats, sessions, secrets and verifiable artifacts.
[Operations](/lys/operations/)

Resolve admission failures, monitor a run and plan service maintenance.
[Reference](/lys/reference/)

Every installed CLI help entry, the four MCP tools, HTTP operations and wire formats.

## Identity and evidence

An agent has an identity and its own authority. A runner starts its reviewed settings on a machine. A session records one execution; it is not the identity itself.

A signature proves who signed particular bytes. A grant decision answers whether a caller may perform an action on a resource. Neither substitutes for the other.

## Connect your tools

Use the [plugins](/lys/plugin/) for the remote OAuth MCP connection in Claude Code or Codex. [Check your connection](/lys/reference/verification/) when diagnosing local commands or admission.