Question 1

What is the C1 identity security platform?

Accepted Answer

C1 is an identity security platform that acts as a single control plane for every identity in an organization: human, non-human, and AI agent. It unifies identity data, controls access in real time, automates identity workflows, and runs audit-ready access reviews across every connected system, all governed by one policy engine.

Question 2

What does the C1 identity platform include?

Accepted Answer

C1 is built on an identity infrastructure foundation, with four core capabilities: Dynamic Access Controls (real-time, policy-driven access), Identity Automations (automated identity workflows), Intelligent Access Reviews (automated certifications), and Super Directory (a unified source of truth for every identity). All four share one identity model and policy engine, and extend to AI agents through C1's AI Access Management (AIAM).

Question 3

How does C1 govern AI agents and MCP tool calls?

Accepted Answer

C1 places an identity-aware proxy between AI clients like Claude, Cursor, and ChatGPT and the MCP servers they call. Every tool call is authenticated, checked against the caller's access profile, and logged with full identity context. Access is granted at the individual tool level using the same access profiles and policies that govern human access, and runtime hooks can redact, modify, or block calls.

Question 4

How is C1 different from legacy IGA tools?

Accepted Answer

Legacy IGA governs human access to applications through static roles, periodic batch syncs, and quarterly reviews, with no concept of an AI agent or a tool call. C1 governs humans, non-human identities, and agents through one real-time policy engine: granting time-bound access, automating workflows in code, and running continuous reviews. Agent tool calls are governed by the same engine as human access.

Question 5

What types of identities can C1 manage?

Accepted Answer

C1 manages every identity type from any connected source, including employees, contractors, service accounts, OAuth tokens, API keys, and autonomous AI agents. Accounts from every system resolve into a single C1 identity record, so access is governed consistently whether the actor is a person, a workload, or an agent.

Question 6

How does C1 connect to existing systems?

Accepted Answer

C1 connects through hundreds of out-of-the-box connectors and thousands of MCP servers, with a framework to build custom connectors for anything else. Every capability is available through the API, MCP, the cone CLI, and Terraform, so identity can be managed as config-as-code alongside the rest of the infrastructure.

One control plane for every identity.

Every access decision runs through identity.

Every system

Every identity