Quick Start
From a fresh account to a governed, enforced agent, all in the app. No code. The same steps can be driven from the CLI or SDK later, see SDK and advanced, but you do not need them here.
1. Create your account
Section titled “1. Create your account”Sign up for the TapPass app and create your organization. Your organization is where your agents, models, tools, policies, and audit trail live.
If your company self-hosts TapPass, your platform team gives you the app URL instead. To run it yourself, see Self-hosting.
2. Create an agent
Section titled “2. Create an agent”Open Agents and create one. The agent is the identity TapPass governs. Its Connect step shows the base URL and API key you will use to point a tool at TapPass. Create one agent per app or per user.
3. Connect a model (and a tool)
Section titled “3. Connect a model (and a tool)”Give the agent something to use:
- Open Models and add a provider key (bring your own key for OpenAI, Anthropic, Azure, Bedrock, Gemini, or a model you host). TapPass keeps the key in its vault.
- Optionally open Tools and add an MCP server, so the agent’s tool calls are governed too.
4. Create and assign a policy
Section titled “4. Create and assign a policy”Open Policies and create a policy, from a template or in the builder: what the agent may do. Then assign it to the agent you created in step 2. An agent with no policy assigned is blocked by default, so this is what switches governance on for it.
5. Watch, then enforce
Section titled “5. Watch, then enforce”Your new agent starts in watch mode: decisions are recorded, nothing is blocked.
- Point your tool at TapPass using the agent’s key, see Connect your harness, and send one message.
- Open the audit trail in the app and watch the governed events appear.
- When it looks right, switch the agent to enforce mode. TapPass now blocks what the policy denies and holds what needs approval.
Where to go next
Section titled “Where to go next”Now that an agent is governed and enforcing, grow it:
- Connect your harness wire up more of the apps your team uses.
- Fleet rollout (MDM) push this to many machines with locked config, so the governed path is the only path.
- Single Sign-On bring your own identity provider and invite people.
- Operate at scale stream events to your SIEM and export compliance evidence.
Go deeper:
- What you can do the core flows, end to end.
- How TapPass works the decision model, in plain terms.
- SDK and advanced the CLI, SDK, and HTTP API, including drafting a policy from a plain-language sentence.