Business value in one sentence
Connect enterprise systems to AI agents in minutes, with policy control and measurable ROI per tool call.
ArcaX d Enterprise Agent Control Plane yettmuddalen yal amɛerred agent-to-legacy s tmancent n xems fabrics yettwassnen — Core, Security, Governance, Observability d Pod Manager — akked tamagit n pods SOC yettwafren. Stateless MOE router, Kafka backplane yettwabḍen s tenant d scope, KEDA per-pod autoscaling. Yettwassren. Yettwaf. Ihegga i air-gap.
This is what decision-makers need in the first meeting: a clear business promise, measurable outcomes in days, enterprise-grade controls, and one path to launch.
Connect enterprise systems to AI agents in minutes, with policy control and measurable ROI per tool call.
Run 3 production-like use cases quickly: finance, operations, and security-governed automation.
mTLS, OPA, immutable audit trail, and on-premise posture make security and compliance a built-in default.
ⵜⵊⵊⴰ ⵜⵉⵍⵉⵜ ⵏ ⵜⵔⵓⵙⵜ. ⵙⵙⵉⵖⵣⵍ ⴳ ⵓⵙⵉⵜⴰⵔ ⴰⵅⴰⵜⴰⵔ, ⵙⵙⵓⴼⵖ, ⴽⵜⴱ ⴰⵎⵢⴰ ⴰⵎⵣⵡⴰⵔⵓ — ⵡⵉⵎⴰⵣⴰⵏⵏ ⵏⵏⵓ ⵜⵜⵓⵔⵏⵓ ⵙ ⵉⵙⴰⴼⴰⵔⵏ ⵏ ⵜⵎⴰⵙⵙⴰⵏⵜ ⵙ MCP ⵙⵍⴰⵡⵏ.
ⵙⵙⵉⵖⵣⵠⵙ ⵜⵔⵓⵙⵜ âµ ArcaX â´³ ⵓⵙⵉⵜⴰⵔ ⴰⵅⴰⵜⴰⵔ ⵜⵉⴽⴽⵉ ⵙⵙⵓⴷⴷⵓ ⵡⴰⴽⴽ ⵉâµâµ™âµ‰âµ¡â´°âµâµ âµ™ ⵢⴰⵜ ⵜⴰⵎâµâ´°âµâµœ.
# License key required — request at www.arcax.ai/#demo docker login registry.arcax.ai \ --username $ARCAX_LICENSE_KEY curl -sO https://install.arcax.ai/docker-compose.yml cp .env.example .env docker compose up -d # → 5 services up in ~38s # → Gateway: http://localhost:8000 # → Dashboard: http://localhost:3000
ⵢⴰⵜ POST — ArcaX ⵉⵙⵙⴳⵯⴰⵙ ⴰⵎⵢⴰ, ⵉⵔⵏⵓ UCS, ⵉⵙⵏⴼⵍ ⵡⴰⴽⴽ ⵉⵙⵓⵔ MCP ⵙ ⵓⵣⵣⵓⵍ.
curl -X POST localhost:8000/api/v1/sources \ -H "Content-Type: application/json" \ -d '{ "name": "sap-erp", "type": "sap", "config": { "odata_url": "https://s4hana.corp/sap/opu" } }' # → 8 tools generated in 312ms
ⵎⵠⵡⵉⵎⴰⵣⴰⵠâµâµâµ“ ⵉⵙⴳⵯⴰⵙⵠMCP âµ™ ⴱⴰⴱ. ⵡⴰⴽⴽ ⴰⵙⵓⵔ ⵉâµâµâ´° âµ™âµâ´°âµ¡âµ ⴷⴰⵔⵜ SDK.
POST /mcp/acme/3f2a8c/sap_listSalesOrders { "intent": "Q1 2026 open orders", "kwargs": { "limit": 50 } } # ← 200 OK | p99: 1.2ms # ← {"results": [...], "count": 43}
ⵜⴰⵙⵔⵉⵜ ⵠⵓⴼⴰⵔ MCP
/mcp/{tenant_id}/{source_id}/{tool_name}
ⵡⴰⴽⴽ ⵓⴳⴳⵉⴹ âµ AI ⵉⵜⵜⵓⵎⴼⴰⵙ âµ™ ⵜⵣⵣⵉⵔⵉⵜ ⵜⴰⵎⵣⵡⴰⵔⵓⵜ: ⵎⴰⵎâµâ´½ â´°â´· âµâµ”â´± ⵉⵙⵓⵔ âµ™ ⵉⵎⵙⵓⴳⴰⵔⵠⵠⵜⵎⴰⵙⵙⴰâµâµœ âµ™ ⵜⵖⴷⵎⵜ, âµ™ ⵜⵎⵓâµâµ‰, ⵜⵉⵠⵜⴰⵣⴷⴰⵢⵜ ⵉⵜⵜⵡⴰⵙⵓⴷⵙ. ArcaX ⵉⴳⴰ ⵜⴰâµâµ–ⵓⵜ â´°â´·.
ⵉⵙⵓⵔ ⵜⵜⵡⴰⵙⵙⵓⵠⴷ ⵜⵜⵡⴰⵅⵣⵠⴳ ⵓⵙⵓⴷⵙ ⴰⵎⵣⵡⴰⵔⵓ. L1 â´³ ⵜⵉⴼⵙⵓⵜ + L2 Redis. ⴷⴰⵔⵜ ⵜⵓⵙⴷⴰⴷⵜ ⵉ ⵉⴼⴰⵔⵠⵉâµâµŠâµâ´°âµ.
ⵡⴰⴽⴽ ⴰⵎⵢⴰ ⵠⵉⵙⴰⴼⴰⵔⵠⵉⵜⵜⵡⴰⴽⵜⴱ, ⵉⵜⵜⵡⴰⵙⵜⵉ, ⵉⵜⵜⵡⴰⴷⴷⴰⵔ ⵓⵣⵎⵣ ⵠⵜⵙⴽⵉâµâµœ. ⵉⴳⴳⵓⵎ â´¼âµâµâ´°âµ™ ⵎⴰ ⵜⵔâµâµ“ ⵜⵖⴰⵡⵙⴰ.
ⵡⴰⴽⴽ ⴰⵙⵔⴰⴳ ⵉⵜⵜⵡⴰⵙⵓⴷⵙ: bytes_in + bytes_out ⵉ ⵡⴰⴽⴽ ⴰⵎⵢⴰ, ⴰⵙⵓⵔ, â´· ⴰⵎⴰⴷⴷⵓⴷ. ⴰⴷⴷⵓⵔ ⵠⵡⴰⵙⵙ. ⵜⴰⴼⴰⵜⵕⴰ ⵜⴰⵣⵣⵓâµâ´°âµâµœ.
PKI Ed25519, ⵉⵎⵓⵙⵙⵓⵜⵠⵉⵥⵓⵕⴰâµâµ™ ⵉⵜⵜⵡⴰⴽⵜⴱⵠⵙ ⵓⵣⵔⵓⵢ, HSM, mTLS 1.3, ⵜⴰⵙⵔⵜⵉⵜ OPA.
ⵉⵎⵔⴰⵔⴰⵜⵠⵠAPI, ⵉⵣⵎⵢⴰⵡⴰⵜⵠⵠSLA, ⵓⴽⵔⵉⵢâµ, â´· ⵉⵣⵔⴼⴰⵠⵠⵜⵎⵔⵓⵙⵜ â´³ ⵢⴰⵜ ⵜⵎâµâ´¹â´°âµ¡âµœ.
ⵉⵎⴰⵙⵙⵠⵠOTLP, ⵜⵉⵙⵔⵜⴰⵠⵠⵜⵎⵉⵔⵉⵜ, â´°âµâµâµ“âµ™ ⵓⵔ ⵉⵜⴱⴷⴷⴰâµ, â´· ⵜⴰⴱâµâµ“ⵜ âµ D3.js â´³ ⵡⴰⴽⵓⴷ ⴰⵎⴰⵢâµâµ“.
ⴰⵙⴽⵉⵎⴰ ⵏ ⵓⴳⵎⵓⴹ ⵏⵏⴽ ⵉⴱⴷⴰ. ArcaX ⵉⵙⵃⵓⴷⴷⵓ ⵉⵡⵜⵜⴰⵙ. ⵜⴰⴳⵔⴰⵡⵜ JIT ⵜⴻⵜⵜⵡⴰⵙⵎⴻⵎ, ⵉⵙⴽⴰⵔⵏ ⴰⵔ ⵜⵜⵓⵙⵎⴰⴷⵏ ⴷ ⵓⵙⵏⴼⵍⵓⵍⵏ ⴳ 30 ⵏ ⵜⵙⵉⵏⴰⵢⵉⵏ. 0 ⵏ ⵓⵙⵙⵉⵜⵉ.
5-stage deterministic pipeline: Probe → UCS → Contextualise → MCP Generate → JIT Cache. <50ms P99 per source registration.
OTLP traces, metrics and audit logs with semantic HTTP attributes and outbound HTTPX trace propagation.
ⴰⵙⵎⴰⴳⴰⵍ ⴰⵢⵙⵃⵓⴷⴷⵓⵜⵏ ⵉⵙⵙⵉⵡⴹ ⴳ ⴰⴽⴽ ⴰⴳⵎⵓⴹ ⵉⵣⵣⵔⴱⵏ. ⵉⵙⴽⵉⵎⴰⵜⵏ SQL, REST API, ⵉⵙⴼⴽⴰ ⵏ SAP OData — ⴰⴽⴽ ⴰⵙⵎⵓⵜⵜⴳ ⴰⵔ ⵉⵜⵜⵓⵙⴱⴷⴰⴷ ⴳ ⵎⴰⵕⵕⴰ ⵏ 30 ⵏ ⵜⵙⵉⵏⴰⵢⵉⵏ, ⵜⴰⴳⵔⴰⵡⵜ JIT ⴰⵔ ⵜⵜⵓⵙⵎⴻⵎ, ⵉⵙⴽⴰⵔⵏ ⴰⵔ ⵜⵜⵓⵙⵎⴰⴷⵏ ⴷ ⵓⵙⵏⴼⵍⵓⵍⵏ ⵙ ⵓⵡⵜⵜⴰⵙ. ⵄⴰⴷⵉ ⴰⵙⵙⵉⵜⵉ. ⵄⴰⴷⵉ ⴰⵙⵏⴼⵍ ⵙ ⵉⴷⵙ. ⵄⴰⴷⵉ ⴰⵙⵙⵉⴱⴹⵓ ⵏ ⵉⴳⴳⵉⴹⵏ.
ArcaX tesselḥu ayen tesselha tessarakit i yagents: yal asiwel n ufecku yettwanefsed, yettwaḥerrez, yettwaselkam, yettwafaq — ɣef clouds, modeles, isnasen, d isuriren legacy.
Tiɣimit n yagents s allalen s isbadal i yal tiɣimit, allalen n trajectory, d agentic circuit breaker s aseḥbes n ukatar s ufus.
Ifecka MCP yettwaselkam, ittwaxleqen seg wugar n 100 n yiɣbula n tkerkust deg tesdatin, s txedmit n usekmi HAM d registry n ifecka yettwaversionen.
Probes SAP, mainframe, relational, NoSQL, messaging d SaaS — s mediation yettuseḥḥun s yiman-is, ad yalsemɣed ifecka s wudem awurman m'ara ibeddel schema.
mTLS 1.3 s CA Ed25519 tagensit, tisura API s scopes d usefrek iḥerden, RBAC multi-tenant d SSO s Keycloak.
Isɣanen OPA ɣef yal asiwel, asimulat n shadow n yisɣanen, aqbalu n yemdanen (HITL) d asewwi n uswir yettusɣeṛṛ.
Isighan OpenTelemetry, adlis n audit WORM ur yettubeddel, d isalan n audit yessefran Merkle yettwasenqden bla tuqqna.
Execute — Secure · Governed · Observable.
ⵉⴼⵔⵉⵇⵠⵠAI ⵠⵜⵎⴰⵙⵙⴰâµâµœ ⵙⴼⵔⴰⵢⵠ60-80% ⵠⵡⴰⴽⵓⴷ ⵠⵓⴳⴳⵉⴹ ⵉ ⵓⵙⵖⵉⵡⵙ ⵠⵉⵙⵓⵔ, ⵓⵔ â´· â´°âµ™âµâ´¼âµ ⵠⵡⵉⵎⴰⵣⴰâµâµ. ArcaX ⵉⵙâµâ´¼âµ ⵜⴷⵓⵙⵉ ⵠⵓⵙⵖⵉⵡⵙ ⵓⵔ ⵜⵙⵙⵉⵠⵙ ⵜⵉⵔâµâ´°â´³âµœ ⵉâµâµâ´°âµœ ⵜⵙⵙⵖⵔⵙ.
ⴰⵙⵓⵎⴰⴷ âµ…â´¼ ⵉⵥⴹⴰⵡⵠⵠⵜⵙâµâ´°âµœâµâµœ. ⵇⵔ â´°âµ– ⵉ ⵓⵙⵓⵎⴰⴷ ⴰⵎⵙⴽⴰⵔ ⵉ ⵓⴳⴳⵉⴹ âµâµâµ“.
ⵡⴰⴽⴽ ⴰⵎⵢⴰ ⵉⵣⵔⵔⴰⵜ ⵜⴰⵙⵔⵉⵜ ⵉⵙⴳⵯⴰⵙâµ: ⴰⵙⴽâµâµ“, ⴰⵙⴳⵯⴰⵙ, ⴰⵎⵙⵉⵡâµ, â´°âµ™âµâ´¼âµ âµ MCP, â´· ⴰⵅⵣⵠJIT. ⵓⵔ ⵉâµâµâµ‰ ⵓⴼⴼⵓⴳ. ⵓⵙⵉâµâµ™ ⵠⵓⵙⵓⵔ ⵉⵜⵜⵡⴰⵙâµâ´°âµ¢ ⵉ ⵡⴰⴽⴽ ⴰⴽⵓⴷ.
▼ Click any stage to see source-specific detail
ⴰⵙⵙⵙⵓⵔⵙ ⵠⴰⵎⵢⴰ: OpenAPI, ⵓⵙⵉâµâµ™ SQL, SAP CDS, ⵉⴷâµâµ‰âµ™âµ COBOL
Universal Capability Schema — ⴰⵙⵓⴷⵢ ⴰⵎⵣⵡⴰⵔⵓ ⵓⵔ ⵉⵙⵙⵏ ⴰⵎⵢⴰ
â´°âµ™âµâ´½â´°âµŽ ⴰⵥⴰⵢⵔ ⵠⵉⴳⵔⴰⵡⵠ+ ⴰⵙⵓⴼⵖ ⵠⵡⴰⵣⵣⵓ OPA ⵉ ⵡⴰⴽⴽ ⴰⵙⵓⵔ
ⵉⵙⵙⵓⴼⵖ ⵉⵙⵓⵔⴰⵠⵠPydantic v2 + ⵉⴷⴽⵓⵔⴰⵜⵓⵔⵠⵠFastMCP ⴳ ⵡⴰⴽⵓⴷ ⵠⵓⵙⴰⵔⵓ
ⴰⵔⵣⵣⵓ L1+L2, ⴰⵙⵜⵓⴷⵙ ⵉ ⵡⵉⵎⴰⵣⴰâµâµ. ⴷⴰⵔⵜ 1ms âµ…â´¼ ⵓⴼⴰⵔ â´°âµâµŠâµâ´°âµ.
ⵉⵎⵔⴰⵔⴰⵜⵏ MCP, ⵉⵣⵎⵢⴰⵡⴰⵜⵏ SLA, ⵓⴽⵔⵉⵢⵏ, ⵉⵣⵔⴼⴰⵏ ⵏ ⵜⵔⵓⵙⵜ ⴷ ⵜⵉⵙⵔⵜⴰⵏ ⵏ ⵜⵎⵉⵔⵉⵜ — ⴳⵔⵙⵏ, ⴷⴰⵔⵜ ⵜⵓⵙⵃⵉⵔⵜ ⵜⴰⵡⵓⵔⵉⵡⵉⵏ.
ⵙⵡⵓⵔⵉ ⵉⵙⵓⵔ â´³ ⵉⵎⵔⴰⵔⴰⵜⵠMCP ⵉⵜⵡⴰⵙⵓⵔⵙâµ. ⵎⵠtool_filter, ⵙⴷⵓⵙ ⴰⴷⴷⵓⵔ, â´·â´·â´°âµ” ⵓⵣⵎⵣ ⵠⵜⵙⴽⵉâµâµœ: â´°â´·â´·â´°â´· → ⵉⵜⵜⵓⵣⵎⵎ → ⵉⵜⵡⴰâµâµâµ™ → ⵉⵣⵔⵉ.
ⵓⴽⵔⵉⵢⵠⵙⵙⵓⴼⵖⵠⴰⵙⵓⴷⵓⵎ MCP ⵉⵜⵜⵡⴰⵣⵉⴳ âµ™ ⵓⵣⵣⵓⵠⴳ ⵕⵕⵓⵢ. ⵉⵙⵓⴷⵓⵎⵠⴰⴷ ⵙⵙⵖⵔⵙâµ, â´°â´· ⵙⵙⵎⵔⵙⵠⴷ âµâµâ´°âµ, â´· ⴰⵔⵣⵓⵠⴳ ⵡⴰⴽⵓⴷ ⴰⵢⴷⴰâµ.
ⵜⴰⵔⵓⵙⵜ ⵠⵜⵎⴰⵙⵙⴰâµâµœ ⴰⴽⴷ ⵉⵄⵕⵕⴰⵠⵉⵔⵣⵎâµ: max_sources, max_seats, max_rps. ⴰⵢⵙâµâµ‰âµ¡âµ ⵠⵓⵙⵎⵔⵙ â´³ ⵡⴰⴽⵓⴷ ⴰⵢⴷⴰâµ.
5 ⵠⵉⴱⵛⵛⵓⵔⵠⵉⵜⵜⵓⵖⵜⴰⵙⵠⵉ ⵡⴰⴽⴽ ⴰⵎⵔⴰⵔⴰ: error_rate_pct, quota_pct, latency_p99_ms, call_count, bytes_kb.
â´°âµâµâµ“âµ™ ⵠⵜⵓⴷⴷⵉⵜ ⴰⵙⵉⴼ-ⵓâµâ´°. ⵉⵎâµâµ”ⴰⵡⵠJSON ⴷⴰⵔⵜ/â´°â´¼âµâµâ´°. ⴰⴽⵜⴰⵔ, IP, ⴰⴽⵓⴷ. PCI-DSS â´· GDPR.
ⴰⵣⵣⵓⵠDEV → UAT → PROD âµ™ ⵢⴰⵠⴰⵙⵔⴰⴳ API. ⵓⵙâµâ´½âµ‰âµ ⵉⵙⵖⵉⴼ, ⵉⵎâµâµ–ⵉâµâµ ⵉⵜⵜⴱⴷⴰâµâµ ⵉ ⵡⴰⴽⴽ ⴰⴷⵎⴰⵡⴰâµ.
ⵡⴰⴽⴽ ⴰⵙⵖⵉⵡⵙ — ⵙⴳ SAP BAPI ⵙ Mainframe TN3270 — ⵉⵔⵣⵣⵓ ⵜⴰⵎⵙⵙⵓⴳⵔⵜ JIT, ⴰⵎⵓⵙⵙⵓ ⵏ ⵜⴰⵙⵔⵜⵉⵜ OPA ⴷ ⵓⵙⵓⴷⵙ FinOps ⵉⵡⵙ. ⵓⵔ ⵉⵍⵍⵉ ⵡⴰⵔ ⴰⵙⴳⴷⵉ.
ⵜⴰⵖⴷⵎⵜ ⵓⵔ ⵜⴳⵉ ⵜⴰⵍⵖⵓⵜ ⵏ ⵜⵥⵔⵉⴳⵜ — ⵜⴳⴰ ⵜⵙⵔⵉⵜ ⴷ ⵜⵎⴰⵜ. ⵡⴰⴽⴽ ⴰⵎⵔⴰⵔⴰ ⵉⵔⵏⵓ ⵅⴼ Zero-Trust: ⵓⵔ ⵜⵍⵍⵉ ⵜⴰⵎⵓⵏⵉ ⵜⴰⵥⵓⵕⴰⵏⵜ, ⵓⵔ ⵜⵍⵍⵉ ⵜⵓⵙⵃⵉⵔⵜ ⵉⵜⵜⵡⴰⵔⵣⴰ, ⵓⵔ ⵜⵍⵍⵉ ⵜⴳⴳⵉⵎⵜ ⵜⴰⵙⴽⵉⵍⵜ ⴳ ⵓⵙⴽⴽⵉⵍ.
CA ⵉⵡⵙ. ⵉⵎⵓⵙⵙⵓⵜⵠⵠⵢⴰⵜ ⵜⵙⵔⴰⴳⵜ JIT ⴰⴽⴷ ⵓⵙⴽⴰⵔ ⴰⵎⵣⵡⴰⵔⵓ. ⵉⵙⵓⴷⵓⵎⵠⵓⵔ ⵙⴽⵔⵠⵓâµâµ‰âµ â´· ⵉⴷ ⴷⴷⵓⵙ ⵠⵓⵥⴹⴰⵡ.
ⵡⴰⴽⴽ ⵜⵉⵔⴱⵉⵡⵉⵠⴳⵔ ⵉâµâµ™âµ‰âµ¡â´°âµâµ â´· ⵡⵉⵎⴰⵣⴰâµâµ ⵙⵎⵢⴰⵡⴰâµâµœ ⵜⴹⵓⵕⵉⵜ âµ TLSv1_3. ⵓⵙⵓⴳ ⵠⵜⵎⵙⵙⵓⴳⵔⵜ âµ™âµâ´°âµœ.
ⵎⵠHSM_LIB_PATH ⵉ ⵜⵎⵉⵎⵉⵜ âµâµâµ“ âµ PKCS#11. ⵉⵙⵓⴷⵓⵎⵠⵓⵔ ⵙⴳⴳⵉⴷⵠⴳ ⵜⵉⴼⵙⵓⵜ ⵠⵓⴼⵔⴰⴽ.
ⵡⴰⴽⴽ ⴰⵙⵔⴰⴳ ⵠⴰⵙⵓⵔ ⵉⵜⵜⵡⴰⵣⵓⵔ ⵅⴼ OPA ⴷⴰⵔⵜ ⵓⵙⵔⵓⵔⴰⵙ. ⴰⵙⴷⵊⵉ ⵅⴼ ⴰⵎⴰⴷⴷⵓⴷ, ⴰⵎⵔⴰⵔⴰ, ⴰⵙⵓⵔ, ⴰⴽⵓⴷ.
ⵡⴰⴽⴽ ⵜⴰⴱⵔⴰⵜ ⵜⴰⵙⴳⵯⴰⵙⵜ ⵉâµâµ‰âµ™ ⵜⴰâµâµ™âµ™âµ‰âµŽâµœ Ed25519. ⵉⵎⵙⵓⴳⴰⵔⵠⵉâµâµâ´°âµ â´· ⴰⵟⵟⴰⵙ ⵣⵓâµâ´· ⴰⵙⵙⵙⵉⴽⴽⵓⵙ ⵠⵓⵥⵓⵕ.
source_audit_log ⴰⵙⵉⴼ-ⵓâµâ´°. ⵉⵎâµâµ”ⴰⵡⵠJSON ⴷⴰⵔⵜ/â´°â´¼âµâµâ´°. PCI-DSS âµ™ ⵓⵙâµâµŽâ´°âµâµ“. ⵓⵔ ⵉâµâµâµ‰ DELETE.
Intermediate CA issues node certs; root key stays offline and HSM-backed. Cert chain depth enforced on every mTLS handshake.
Nonce window (300 s default) backed by Redis Sorted Set. Replayed requests rejected with 401 REPLAY_REJECTED before any tool execution.
All sensitive blobs (keystore, audit snapshots) encrypted with AES-256-GCM. Random 96-bit IV per record. Key derived from ARCAX_MASTER_KEY.
Built-in SOC dashboard page: auth-failure KPIs, IOC/IOA hit counters, MITRE ATT&CK tactic distribution, and a live security event timeline.
ⵜⴰⴱâµâµ“ⵜ WebSocket ⵜⴰⴱⵔⵉⴷⵜ âµ…â´¼ ⵓⵙⵙâµâµœâµ 3000. ⵜⴰⴱâµâµ“ⵜ âµ D3 â´³ ⵡⴰⴽⵓⴷ ⴰⵎⴰⵢâµâµ“, ⵜⴰⵣⵓⵔⵜ ⵠⵉⵙⵖⵉⵡⵉⵙâµ, ⴰⵣⵎⵣ ⵠⵜⵙⴽⵉâµâµœ âµ MCP, â´· FinOps.
ⵜⴰâµâµ–ⵓⵜ âµ D3 ⵠⵡⴰⴽⴽ ⵜⵉⵔⴱⵉⵡⵉⵠⵉⴷⵔⵉⵎⵙⵠⵡⵉⵎⴰⵣⴰâµâ†’ⴱⴰⴱ→ⴰⵎⵢⴰ â´³ ⵡⴰⴽⵓⴷ ⴰⵎⴰⵢâµâµ“.
ⵜⴰⵣⵓⵔⵜ, ⵉⵄⵕⵕⴰⵠⵠⵓⵣⵎⵣ ⵠⵜⵙⴽⵉâµâµœ, ⴰⵎⴹⴰⵠⵠⵉⵙⵓⵔ â´· ⴰⵅⵙⵙⵓⵙ âµ™ ⵢⴰⵠⵓⴳⵣⵣⵓ ⵉ ⵡⴰⴽⴽ ⴰⵎⵢⴰ.
ⵔⵏⵓ, ⵙⵜⵉ, ⵣⵎⵎ, ⵏⵏⵙ, ⵣⵔⵉ — ⴰⴽⴷ ⵡⴰⵎⴹⴰⵏ ⵏ ⵡⵓⴽⵔⵉⵢⵏ ⵉ ⵡⴰⴽⴽ ⴰⵎⵔⴰⵔⴰ.
ⵜⴰⵔⵉⵖⵜ ⵠⵉⵇⵓâµâµ™ ⵠⵜⵉⵥⵉ. âµ”âµâµ“ ⵉⵣⵎⵢⵓⵔⴰâµ, ⵎⵠrpm / quota_kb_day, ⵔⴱⴷ â´· ⵉⵎⵔⴰⵔⴰⵜⵠⵙâµâ´°âµ¡âµ.
ⴰⵜⵜⵓⵢ ⵠⵉⵙⵓⴷⵓⵎâµ, ⴰⵙⵔⵓⵔⴰⵙ ⵠⵕⵕⵓⵢ/ⴰⵙⵖⵔⵙ/ⴰⴱⵟⵟⵓ, ⴰⵢⵙâµâµ‰âµ¡âµ ⵡⴰⵔⵉⵙ ⵠⴰⴷⴷⵓⵔ ⵉ ⵡⴰⴽⴽ ⵓⴽⵔⵉⵢâµ.
â´°â´·â´·â´°âµ” ⵠⵉⵣⵔⴼⴰâµ: max_sources, max_seats, max_rps. ⴰⵢⵙâµâµ‰âµ¡âµ ⵠⵓⵙⵎⵔⵙ ⴰⵢⴷⴰⵠⴷ ⴰⵙⵖⵉⵡⵠⵠⵓⵔⴰⵃⵡⵓ.
ⴰⵙⵖⵉⵡⵠⵠ5 ⵠⵉⴱⵛⵛⵓⵔâµ. ⵉⵡⵜⵜⴰ ⵉⴷⵔⵉⵎⵙⵠâµâµ‡âµ‡â´°âµâµ â´³ ⵓⴱⵔⵉⴷ ⵉⴷⵔⵉⵎⵙⵠⴰⴽⴷ Webhook + ⵓⵙⴷⴰⵔⵓ âµ™ ⵉⵎⵉâµ.
ⴰⵙⵉⴼ ⵠⵜⵓⴷⴷⵉⵜ ⵓⵔ ⵉⵜⴱⴷⴷⴰâµ. ⴰⴽⵜⴰⵔ, IP, ⴰⴽⵓⴷ, ⴰⵄⵕⵕⴰ ⴷⴰⵔⵜ/â´°â´¼âµâµâ´°. ⴰⵙⵙⵓⴼⵖ ⵉⵙⴳⵯⴰⵙⵠWORM.
bytes_in + bytes_out ⵉ ⵡⴰⴽⴽ ⴰⵢⵢⵓⵔ ⵠⴰⵎⵢⴰ. ⵉⴱⵛⵛⵓⵔⵠⵠⴰⴷⴷⵓⵔ ⵠⵡⴰⵙⵙ. ⵜⴰⴷⵓⵙⵜ ⵠⵜⴷⵓⵙⵉ ⵅⴼ ⴰⵎⵢⴰ, ⴰⵙⵓⵔ, ⴰⵎⴰⴷⴷⵓⴷ.
â´°âµ™âµâ´¼âµ ⵠⵜⴷⵓⵙⵉ ⵉ ⵡⴰⴽⴽ ⴰⵎⴰⴷⴷⵓⴷ. ⴰⵙⵙⵓⴼⵖ âµ™ CSV ⵉ ⵜⴼⴰⵜⵕⴰ ⵜⴰⴱⵔⵉⴷⵜ.
Super admin creates tenants, delegates tenant admins, provisions projects, and issues project-scoped tokens from the same command center.
Watch the control plane, network control plane, pod bunker fleet, tunnels, targets, and zero-trust signals in one operational view.
ⵙⵙⴼⵔⵓ ⵡⴰⴽⴽ 73 ⵠⵡⴰⵢⵢⵓⵔⵠⵠⵉⵎⵢⴰⵜâµ. ⵙⴷⵊⵊⵉ âµ…â´¼ ⵜⵎⵙⵙⴳⵎⵉ. ⵥⵔ ⵉⵎⵙⵙⵙⵓⴷⵓⵙⵠⵠⵓⵙⵙⵉⵖⵣⵠⴷ ⵉⵎⵙⴽⴰⵔⵠⵠⵜⵓⵙⵙâµâ´°âµœ.
ⴰⵄⵕⵕⴰ ⵠⵓⵎⵓⵙⵙⵓ mTLS, ⵜⵉⵥⵉ âµ OPA, ⵜⴰⵣⵓⵔⵜ âµ PKI CA, ⴰⵔⴱⴰⴹ âµ HSM, â´· ⴰⵄⵕⵕⴰ âµ Redis â´³ ⵢⴰⵠⵓâµâµŽâµ”ⴰⵡ.
Auth failures, sig failures, IOC and IOA hits, quarantined agents. D3 bar chart, MITRE ATT&CK distribution, security event timeline. Polled every 10 s.
The HAM MCP server exposes 17 governance operations as callable tools. Any MCP-compatible agent with the ham:admin scope can issue tokens, manage subscriptions, control licenses, and drive the full agent lifecycle — no API docs needed.
auth.issue_token, auth.refresh_token, auth.revoke_token — full JWT lifecycle from any agentic workflow.
auth.issue_token
auth.refresh_token
auth.revoke_token
subscriptions.list/create/suspend/activate/cancel — manage tenant subscriptions programmatically.
subs.create
subs.suspend
subs.cancel
licenses.issue/verify/revoke/usage — issue keys, check validity, revoke, and track consumption.
lic.issue
lic.verify
lic.revoke
agents.enroll/quarantine/activate/decommission — full FSM lifecycle for every registered agent.
agents.enroll
agents.quarantine
agents.decommission
plans.list — enumerate SLA plans with pricing and entitlements.
plans.list
X-Trace-Id forwarded on every tool response. ham:admin scope enforced. Every call auditable.
X-Trace-Id
ham:admin
| ⵜⵥⵔⵉⴳⵜ | ArcaX (UAM) | Kong / Axway | Apigee | MuleSoft |
|---|---|---|---|---|
| ⴱⴰⴱ MCP ⴰⵢⵢⴰⴷ | ✓ Native | ✗ | ✗ | ✗ |
| ⴰⵙⵡⵓⵔⵉ ⵠⵉⵙⵓⵔ JIT | ✓ | ✗ | ✗ | ✗ |
| 100% ⴷⵉⵖ | ✓ | Partial | Cloud | Hybrid |
| ⵜⵉⵔâµâ´°â´³âµœ âµ ROI ⵉ ⵡⴰⴽⴽ ⴰⵙⵔⴰⴳ | ✓ Built-in | Plugin | Plugin | Add-on |
| PKI / mTLS ⴰⵣⵣⵓâµâ´°âµ | ✓ Zero-config | Manual | GCP-only | Add-on |
| ⴰⵙⴱⴷⴷⵉ Air-Gap | ✓ | Partial | ✗ | ✗ |
| ⴰⵙⵖⵉⵡⵙ âµ Mainframe | ✓ Native | ✗ | ✗ | Add-on |
| ⴰⴽⵓⴷ ⵠⵓⵙⵎⴽⵠⵠⴰⵎⵢⴰ | < 5 min | Days | Days | Weeks |
| ⴰⵙⵉⵜⴰⵔ ⵠⵉⵙⵓⵔ ⵉⵜⵜⵡⴰâµâ´¹âµŽ | ✓ Full stack | Plugin | ✓ | Add-on |
| ⵜⴰⴱâµâµ“ⵜ ⵠⵓⵎⵣⴰⴳ ⵠⵓⵙⴼⵓⴳâµâµ“ | ✓ 12 views | Basic | Basic | Add-on |
| ⵉⵙⵖⵉⵡⵉⵙⵠⵠVector DB | ✓ 5 native | ✗ | ✗ | ✗ |
| ⵉⵙⵖⵉⵡⵉⵙⵠⵠSIRH / HCM | ✓ 6 native | ✗ | ✗ | Some |
| Capital Markets Connectors | ✓ 12 native | ✗ | ✗ | ✗ |
| Telecom / OSS-BSS Connectors | ✓ 10 native | ✗ | ✗ | ✗ |
| ⴰⵣⵣⵓⵠDEV→UAT→PROD | ✓ One API call | Manual | Manual | Manual |
| â´°âµâµâµ“âµ™ ⵓⵔ ⵉⵜⴱⴷⴷⴰⵠ| ✓ PCI-DSS | Plugin | Paid | Paid |
ⵎⴰ ⵉⵙⴰⴼⴰⵔⵏ ⵏⵏⵓ ⵍⵍⴰⵏⵜ ⴳ SAP, Workday, Mainframe ⵏⵖ ⴳ Data Lake — ArcaX ⵉⴷⴷ ⵡⵉⵎⴰⵣⴰⵏⵏ ⵜⴰⵔⵔⴰⵜ ⴳ ⵜⵓⵙⴷⴰⴷⵉⵏ ⵓⵔ ⴷ ⴳ ⵡⴰⵢⵢⵓⵔⵏ.
ⴰⵎⴰⵣⴰⵏ ⴰⵎⴰⵍⵉ ⵉⵍⵎⵓⴷⵏ LLM ⵉⵙⵓⵔ SAP S/4HANA ⵉ ⵉⵎⵥⴰⵔⵏ ⵉⵙⵓⴷⵓⵎⵏ, Oracle ERP ⵉ ⵜⴰⵣⴷⴰⵢⵜ ⵏ ⵜⴼⵖⵉⵏⵜ, ⴷ Kyriba ⵉ ⵉⴽⵏⵓⵢⵏ FX — ⵙⴳ ⵢⴰⵜ ⵜⵉⵍⵉⵜ ⴰⴽⴷ ⵓⵙⵇⵇⴰⵙ ⴰⵎⴰⵜⵜⵓ.
ⴰⵎⴰⵣⴰⵠⵠⵓⵙⵖⵓⴷⵓ ⵉⵖⵔⴰ ⵉⵎⴰⵙⵙⵠⵠTimescaleDB, ⵉⵙⵓⵔ ⵉⴷâµâµ‰âµ™âµ COBOL âµ Mainframe â´· ⵉⵙâµâµ‰âµ‡â´¹ ⴰⴽⴷ Infor ERP ⵉ ⵉⵎⴹⴼⴰⵕâµ.
ⵙⵎⵜⵉ ⵉⵙⴰⴼⴰⵔⵠⵠⵉⵙâµâµŽâ´°â´·âµ ⵙⴳ SAP SuccessFactors, Workday, ADP â´· Lucca. ⵎⵔⴰⵔⴰ âµ…â´¼ ⵡⴰⵎⴹⴰâµ, ⵉⴷⵓⵔⴰⵔâµ, â´· ⵉⵙⵓâµâ´°âµ â´³ ⵡⴰⴽⴽ ⵉⵎⵢⴰⵜⵠHRIS ⵢⴰⵠⴰⴽⵓⴷ.
v0.2 ships a complete PKI hierarchy with offline root, replay protection, AES-256-GCM at rest, a built-in SOC command center, and 17 new HAM MCP tools for agentic governance — all with E2E test coverage.
PKI ICA — intermediate CA, offline root, HSM-backed production path
CRL + OCSP real-time cert revocation on every mTLS handshake
Replay protection — nonce window 300 s, Redis Sorted Set
AES-256-GCM at rest for keystores and audit snapshots
SOC Dashboard — KPIs, MITRE ATT&CK chart, event timeline
HAM MCP Server — 17 tools, ham:admin scope, trace-id forwarding
The platform evolves continuously. Features below are confirmed for upcoming releases.
MCP tool registry — public catalog on HuggingFace Hub / Smithery
HAM WebSocket push — real-time agent state events
SOC real-time WebSocket refresh (replaces polling)
ANSSI qualification dossier
Ham:admin rate limiting (separate RPM bucket)
OpenTelemetry ham_tool_calls_total metric per tool
ⴰⵡⵙ ⴷⵉⵎⵓ ⴰⵎⵙⴽⴰⵔ â´· ⵓⵙⵓⵎⴰⴷ âµ ROI ⵉ ⵓⴳⴳⵉⴹ âµâµâµ“. ⵓⵔ ⵉâµâµâµ‰ ⵡⴰⵔ ⴰⵔⴰⴽⵓⴷ. ⵓⵔ ⵉⵙⵙⵡⴰⵊⴱ ⵜⵉⵖⵉⵎⵓⵜ.