Glossary

Term	Meaning
Actor	The authenticated subject making a request.
Agent	A registered automation identity, distinct from its client software.
Approval	Acceptance of submitted configuration for the next lifecycle stage.
Binding	A scoped relationship, such as a role grant or credential association.
Cedar	The policy language used for authorization decisions.
Connector	An approved route into a target network.
Control plane	The service that owns configuration and administration.
Data plane	The runtime that enforces policy and routes calls.
Discovery	The MCP operation that exposes tools available to the caller.
Drain	Stopping new stateful admission while existing work has bounded completion.
Environment	A configured scope carried through policy, resources, and audit.
Projection	Approved configuration prepared for runtime consumption.
Revocation	Removal of authority, including affected active access.
Secret reference	An identifier for protected material, not the material itself.
Session	State used to continue a stateful protocol interaction.
Tool	An operation exposed through MCP with an input schema.

Read architecture for how these terms fit together.