Independent machine users
Service principals are independent platform identities with their own credentials, expiry, scope, and authorization assignments.
API and MCP automation
Give applications and AI agents useful control, not unrestricted control
Create independent service-principal identities, scope access to tenants, resource groups, or components, and use short-lived API tokens or guarded MCP authentication for supported operations.
SEEMI CLOUD
Reliable infrastructure with operational safeguards built in
Secure by design Backup ready Regional choice API and agent ready
IdentityIndependent machine users
ScopeTenant and resource boundaries
GuardrailsHuman-only sensitive operations
AuditRecorded infrastructure actions
Capabilities
Designed for practical cloud operations
Hierarchical authorization
Grant access at tenant, resource-group, or component level. Higher-level grants flow to lower-level resources within the hierarchy.
Three access levels
Use L1 for read access, L2 for read plus selected controls, and L3 for full administration within the granted scope.
Short-lived API tokens
Exchange a service-principal client ID and secret for a short-lived JWT before calling supported platform APIs.
MCP tools for agents
Supported APIs are progressively exposed as MCP tools for provisioning, backup, restore, inspection, and configuration workflows.
Audited change trail
Core access changes, authorization events, configuration updates, and deployments are logged for relevant tenant administrators.
Human control remains mandatory
APIs and MCP tools do not permit creation of new service principals, authorization grants, or payment-method changes. These sensitive actions require human portal involvement.
Progressive availability
API and MCP coverage is being rolled out. The documentation site is the source of truth for currently available endpoints and tools.
Ready to move forward?