# VisIQ Labs

> VisIQ is the runtime trust layer for enterprise AI: it governs what AI agents are
> allowed to do, isolates the data they can reach, routes sensitive actions through
> human approval, and records a signed, verifiable audit trail of every decision.

VISIQ LABS LLC operates the VisIQ platform. The marketing site is https://visiqlabs.com,
the web application is https://app.visiqlabs.com, the backend automation API is
https://api.visiqlabs.com, and product documentation is at https://docs.visiqlabs.com.

## Pages

- [Home](https://visiqlabs.com/): What VisIQ is and who it is for.
- [How it works](https://visiqlabs.com/how-it-works): The ISOLATE, ALLOW, ORCHESTRATE, and RECORD modules.
- [Pricing](https://visiqlabs.com/pricing): Plans and the free start. Every new account begins with $500 in usage credit, no credit card and no sales call.
- [Start free](https://app.visiqlabs.com/auth/sign-up): Open self-serve sign-up. No invitation, waitlist or demo required.
- [Beta program](https://visiqlabs.com/beta): An invite-based design-partner track, separate from and not required for product access.
- [Privacy Policy](https://visiqlabs.com/privacy)
- [Terms of Service](https://visiqlabs.com/terms)

## Developers

- [Documentation](https://docs.visiqlabs.com): Product docs and the VisIQ SDK — TypeScript (`@visiq/harness` on npm) and Python (`visiq` on PyPI).
- [Action governance API reference](https://docs.visiqlabs.com/rules/action/api-reference): Action-call governance API.
- [Retrieval governance API reference](https://docs.visiqlabs.com/rules/retrieval/api-reference): Context/retrieval governance API.
- [Agent authentication](https://visiqlabs.com/auth.md): How agents authenticate to the API — including self-registration via the human-approved `agent_auth` device flow and revoking your own key (self-revocation).
- [API catalog](https://visiqlabs.com/.well-known/api-catalog): Machine-readable API index (RFC 9727).
- [MCP server](https://visiqlabs.com/mcp): Public read-only Model Context Protocol server (Streamable HTTP); card at [/.well-known/mcp/server-card.json](https://visiqlabs.com/.well-known/mcp/server-card.json).
- [Authenticated Platform MCP server](https://app.visiqlabs.com/api/mcp): Operate the VisIQ product via MCP tool calls (view/author rules, register/manage agents, read decision outcomes, inspect action schemas, respond to HITL, tune settings). Requires a management-audience API key as a Bearer token — see [auth.md](https://visiqlabs.com/auth.md). Both servers are listed in [/.well-known/mcp/server-cards.json](https://visiqlabs.com/.well-known/mcp/server-cards.json).

## Notes

- The VisIQ platform is not anonymously accessible; calling the API requires an
  API key (`Authorization: Bearer <key>`) — issued from the dashboard, or minted
  by a human-approved `agent_auth` device flow the agent can start itself (see
  auth.md). No credential is ever issued without human approval.
- An agent can always revoke its own key (`POST /allow/self/revoke`, or the
  `revoke_self` MCP tool) — no special permission required.
- AI crawlers are welcome (see https://visiqlabs.com/robots.txt).