keyward init & keyward wrap
Onboarding in one command: scaffold a brokered agent from scratch, or adopt an MCP server you already have.
keyward init
npx @keyward.dev/cli init --template mcp
# templates: generic | mcp | next | expressWrites .env.keyward.example (KEYWARD_URL, KEYWARD_AGENT, KEYWARD_AGENT_KEY, KEYWARD_ENVIRONMENT) and a starter keyward.ts client wired for the service-key flow — the same convention the Quickstart uses. Pick the template that matches your stack; generic is a plain Node agent.
keyward wrap
npx @keyward.dev/cli wrap ./my-mcp-server.tsGenerates a keyward-<server>.ts helper alongside your MCP server: a ready-wired Keyward client plus a credentialFor…() function for the provider and scope you name. Your code opts in by importing it — wrap does not rewrite your existing files.
After onboarding
Register the agent in the console (Agents → Register an agent — the id you choose is exactly KEYWARD_AGENT), issue its service key, and connect the provider under Secrets → Connect a provider. Agents must be registered before their first call — unknown agents are denied. From there every call your server makes is scoped, expiring, and audited.