NewCore vs Keycard

Compare the documented agent controls, inspect the differences and verify both products against your own tool-access workflow.

Per-action governance alongside your existing IdP. Delegated tool access with step-up approval.

Limits before strengths

NewCore: Direct CLI tool calls bypass the MCP gateway today. Validate coverage for each agent runtime.

Keycard: Broad agent discovery is not verified.

Criterion	NewCore	Keycard	Delta
Agent identity and ownership	9.0	8.0	+1.0
Agent discovery	8.0	3.0	+5.0
Per-action policy	9.0 joint	9.0 joint	0.0
Agent credentials	8.0	9.0	−1.0
Delegation and on-behalf-of access	8.0	9.0	−1.0
Audit and lifecycle	8.5	8.0	+0.5
Human approval	9.0	8.5	+0.5
MCP gateway and tool control	9.0 joint	9.0 joint	0.0

Delta is NewCore minus Keycard. Green is positive; amber is negative. Differences do not establish deployment quality.

Per-action governance alongside your existing IdP

Delegated tool access with step-up approval