Govern and secure enterprise AI — Speakeasy

# Speakeasy > Speakeasy is the AI control plane for the AI-native enterprise. The layer between every AI agent (Claude, ChatGPT, Cursor, Copilot, Codex, internal agents) and the systems they need to reach (SaaS, internal APIs, databases). Connect, control, secure, and observe AI usage across the organization in one place. ## What an AI control plane is The AI control plane is the governing layer between every AI agent in an organization and every system it is allowed to reach. It unifies connection, identity, policy enforcement, and observability so that every prompt, response, and tool call flows through a single controlled path. Companies that lock everything down kill AI adoption. Companies that don't lock anything down get incidents. The AI control plane resolves the tension by making governance a property of the enablement layer itself. Read the reference architecture: [What is an AI control plane?](/md/resources/ai-control-plane.md) ## The four functions Speakeasy fulfills Speakeasy is built end-to-end across the AI lifecycle. Every product capability maps to one of four functions: - **Connect**: Provision MCP servers, SaaS connectors, and internal APIs through one catalog. Per-team registries, SSO-integrated identity, no custom integration work per tool. Every AI client and every system reach each other through one plane. - **Control**: Enforce who can use what under what conditions. Scoped access by team, role, or individual tool. OAuth 2.1 with PKCE and DCR even when upstream MCPs do not support it. Credential management replaces API keys pasted into config files. Policies are executable rules with a full audit trail, not wiki pages. - **Secure**: Inspect every prompt, response, and tool call in real time. Actively block PII and data exfiltration. Passively detect prompt injection and shadow MCPs. Integrate with the existing SIEM and incident response tooling the security team already uses. - **Observe**: Measure what is actually happening. Token us

openapi: 3.0.3 info: description: The Subscriptions API manages subscriptions for CLI and registry events title: Speakeasy API version: 0.4.0 servers: - url: https://api.prod.speakeasy.com x-speakeasy-server-id: prod x-speakeasy-globals: parameters: - name: workspace_id in: path schema: type: string security: - APIKey: [] - WorkspaceIdentifier: [] - Bearer: [] tags: - description: REST APIs for managing Authentication name: Auth - description: