> **Building with AI coding agents?** Install the authstack plugin with one command. This equips your agent with accurate Scalekit implementation patterns.
>
> **Recommended** (the `-y` flags skip prompts, so the command runs without an interactive terminal):
> ```bash
> npx -y @scalekit-inc/cli setup -y
> ```
>
> Global:
> ```bash
> npm install -g @scalekit-inc/cli
> scalekit setup -y
> ```
>
> Supports Claude Code, Cursor, GitHub Copilot, Codex + skills for other Agent Skills-compatible agents in `~/.agents/skills`.
> Skills: integrate-agentkit, implement-saaskit, add-mcp-oauth, implement-sso, implement-scim.
> [Full setup guide](https://docs.scalekit.com/dev-kit/build-with-ai/)

---

# Enterprise features

Workspace controls for security and compliance reviews: SSO and SCIM for the Scalekit dashboard, custom roles, log streaming to your SIEM and your own encryption key.
These features help your security and IT teams control who manages AgentKit, see what your agents do, and hold the keys to your data. Which ones you can use depends on your plan; see [pricing](https://www.scalekit.com/pricing), or [contact us](/support/contact-us/) to turn one on.

Encryption doesn't depend on your plan: Scalekit always encrypts your data at rest with a key specific to each environment. Bring your own key when you want to hold that key yourself.

| Feature | What it gives you |
|---|---|
| **SSO for the Scalekit dashboard** | Your team signs in to the Scalekit dashboard through your identity provider. [Contact us](/support/contact-us/) to set it up |
| **SCIM for the Scalekit dashboard** | Your identity provider adds and removes dashboard members as people join or leave. [Contact us](/support/contact-us/) to set it up |
| **[Custom roles](/agentkit/team-members/#create-a-custom-role)** | Give each teammate only the dashboard permissions they need |
| **[Log streaming](/agentkit/log-streaming/)** | Send tool calls and connected account changes to Datadog, CrowdStrike or Google SecOps |
| **[Bring your own key](/agentkit/encryption-keys/#set-up-byok-with-gcp-kms)** | Encrypt your environment's data with a key you hold in your own Google Cloud KMS, in place of the Scalekit-managed key, and revoke Scalekit's access to it |

## Next

  - [Stream logs to your SIEM](/agentkit/log-streaming/): Send tool calls and account changes to Datadog, CrowdStrike or Google SecOps.
  - [Security and compliance](/agentkit/security/): What Scalekit protects, and what your app is responsible for.


---

## More Scalekit documentation

| Resource | What it contains | When to use it |
|----------|-----------------|----------------|
| [/llms.txt](/llms.txt) | Structured index with routing hints per product area | Start here — find which documentation set covers your topic before loading full content |
| [/llms-full.txt](/llms-full.txt) | Complete documentation for all Scalekit products in one file | Use when you need exhaustive context across multiple products or when the topic spans several areas |
| [sitemap-0.xml](https://docs.scalekit.com/sitemap-0.xml) | Full URL list of every documentation page | Use to discover specific page URLs you can fetch for targeted, page-level answers |