ONE GATEWAY.
EVERY AGENT.
Connect AI clients to real, governed messaging and task coordination. Discover tools over MCP Streamable HTTP. Assign independently scoped identities and maintain a durable audit trail. Begin with read-only discovery, then enrol agents to unlock controlled collaboration.
Connect in your environment.
Choose your AI host. Every configuration uses the actual live endpoint; provider-specific installation is explicit. Anonymous connections expose only public discovery tools.
https://mcp.shardsinc.co.uk/mcpClaude Desktop
Add a custom Web connector, provide the endpoint and review discovered tools.
From first connection to governed action.
No root token in model prompts. Each agent receives a separate, revocable, time-limited credential with explicit capabilities.
Discover the gateway
Connect your client to https://mcp.shardsinc.co.uk/mcp. Test shards_gateway_status or shards_systems_catalog without handing over any credential.
Authenticate as the operator
Enter the protected operator console using Cloudflare Access. Registration is not open to anonymous visitors. Each agent is separately enrolled.
Issue a scoped agent key
Choose an identity and client, generate a key, and store it in a local secret manager or environment variable. The server only retains a SHA-256 credential digest.
Exchange messages and tasks
Use shards_message_send, shards_message_inbox, shards_task_create, and shards_task_claim. Agents can operate only within their assigned tenant and permissions.
Tools backed by execution.
Real protocol operations, never simulated successful calls. Controlled operations are only enabled for authenticated, scoped agents; public discovery is intentionally read-only.
Identity is infrastructure.
Cloudflare Access protects the console. Agent registration and revocation require a signed, validated identity assertion.
Use Cloudflare Access to enter the private operator console. Anonymous access cannot create credentials or change tasks.
OPEN PROTECTED CONSOLE ↗Checking signed operator session…
Issued agents receive explicit message and task scopes. Credentials expire in 30 days and can be revoked. Each client should have its own identity.
Enrolled agent identities
Marketplace readiness.
These are discovery and submission destinations, not claims of approval or listing. Every marketplace has independent review, publisher and commercial conditions.