---
source_url: "https://docs.aembit.io/get-started/use-cases/"
title: "Aembit use cases | DOCS"
mirrored_at: 2026-08-30T15:03:04.842Z
host: docs.aembit.io
cited_in_42a: true
mirror_canonical: "https://index.42a.ai/docs.aembit.io/get-started/use-cases/index"
---

> **Original source:** https://docs.aembit.io/get-started/use-cases/

Aembit replaces static secrets with identity-based access. It secures two kinds of non-human identity, **AI Agent**: A software workload that authenticates to systems, requests credentials, and accesses resources, either on behalf of a person or on its own. Aembit secures AI agents with the same identity-first model it uses for any workload. User-driven agents such as Claude Desktop also carry a blended identity that ties access to both the user and the agent.[Learn more](https://docs.aembit.io/get-started/use-cases/ai-agents) and **Workload**: Any non-human entity (application, service, automation, AI agent, etc.) that needs to access resources.[Learn more](https://docs.aembit.io/get-started/concepts/how-aembit-works/#introducing-workload-iam), so find your starting point below based on what you’re securing.

Aembit secures AI access in both directions: AI agents reaching into your systems (directly or through MCP servers), and your own applications reaching out to LLM APIs. All three use cases share the same identity-first model.

[Securing MCP server access](https://docs.aembit.io/get-started/use-cases/mcp-server-access)Front your MCP servers with the Identity Gateway so AI agents hold no credentials and every request is audited per user.

→

Applications, services, pipelines, and databases all need credentials to reach the resources they depend on. Aembit issues those credentials just-in-time from verified identity, with no static secrets to store or leak.

### Applications and services

[Section titled “Applications and services”](#applications-and-services)

[Credential Management](https://docs.aembit.io/get-started/use-cases/credential-management)Unify access to AWS Secrets Manager, Azure Key Vault, and HashiCorp Vault through a single identity-based policy layer.

→

[Microservices Security](https://docs.aembit.io/get-started/use-cases/microservices-security)Replace shared service accounts with per-workload identity using SPIFFE JWT-SVID or OIDC tokens in your service mesh.

→

### CI/CD and automation

[Section titled “CI/CD and automation”](#cicd-and-automation)

[CI/CD Pipelines](https://docs.aembit.io/get-started/use-cases/ci-cd)Eliminate hardcoded secrets in GitHub Actions, GitLab CI, and Jenkins. No agent required; it uses your platform's OIDC tokens.

→

### Data and analytics

[Section titled “Data and analytics”](#data-and-analytics)

[Database Access](https://docs.aembit.io/get-started/use-cases/database-access)Replace static database passwords with short-lived, identity-based credentials. No changes required on the database side.

→

### Infrastructure and platform

[Section titled “Infrastructure and platform”](#infrastructure-and-platform)

[Multicloud Environments](https://docs.aembit.io/get-started/use-cases/multicloud)Authenticate workloads in AWS, Azure, and GCP using their native identity, with unified policies across all environments.

→

[Third-Party Access](https://docs.aembit.io/get-started/use-cases/third-party-access)Securely connect to external services like GitLab or Snowflake with automatic credential rotation.

→

* * *

If you’re…

Start with

Complexity

Securing AI assistants and MCP clients

[AI agent access](https://docs.aembit.io/get-started/use-cases/ai-agents)

Moderate

Centralizing and auditing MCP server access

[MCP server access](https://docs.aembit.io/get-started/use-cases/mcp-server-access)

Moderate

Protecting LLM API access

[LLM API access](https://docs.aembit.io/get-started/use-cases/ai-llm-access)

Quick start

Securing CI/CD pipelines

[CI/CD Pipelines](https://docs.aembit.io/get-started/use-cases/ci-cd)

Quick start

Consolidating vault access

[Credential Management](https://docs.aembit.io/get-started/use-cases/credential-management)

Moderate

Securing database access

[Database Access](https://docs.aembit.io/get-started/use-cases/database-access)

Moderate

Running Kubernetes microservices

[Microservices Security](https://docs.aembit.io/get-started/use-cases/microservices-security)

Moderate

Managing multiple cloud providers

[Multicloud Environments](https://docs.aembit.io/get-started/use-cases/multicloud)

Advanced

Connecting to external SaaS APIs

[Third-Party Access](https://docs.aembit.io/get-started/use-cases/third-party-access)

Moderate

* * *

-   [How Aembit works](https://docs.aembit.io/get-started/how-aembit-works) - Architecture and deployment model
-   [Quickstart](https://docs.aembit.io/get-started/quickstart/) - Get started in minutes
-   [Security posture](https://docs.aembit.io/get-started/security-posture/) - Security architecture and compliance