# Temporal Runtime Target Integration

Temporal is an open-source durable execution platform that keeps long-running workflows reliable through automatic retries, state persistence, and failure recovery.

## Benefits with Ory + Temporal Runtime Target Integration

Ory integrates with Temporal to give teams a verified protection boundary for AI agents in production. Teams run an agent secured with Ory Agent Security in a customer-owned Temporal Worker, with tool calls isolated in Activities where each one is checked before it runs. Every gated tool call is checked against fine-grained authorization to permit or deny the action, and all activity is logged for a complete audit trail. Teams can start in Observe mode to see how agents use their tools, then switch to Enforce mode so agents act only within their authorized permissions.

The fastest way to get started with Ory Agent Security is to sign up for the Ory Network. Install the ory-agent CLI, then create an Agent Security deployment for Temporal from the Ory Console or with the CLI from your agent's project directory.

`brew install ory/tap/ory-agent`

[View Temporal docs (opens in a new tab)](https://docs.temporal.io/production-deployment/worker-deployments)

### Agent IAM

Secures agents running on Temporal with a runtime identity, fine-grained authorization on every gated tool call, and complete audit logging.

### CIAM

Lets teams ship customer-facing agents on Temporal that act on behalf of end users with Ory-managed authentication and consent, following Ory best practices.

### B2B IAM

Applies fine-grained authorization to every action agents take for business customers on Temporal, for durable, long-running agent workflows, and scales with business growth.

1. **Identity**  
   Verifies the Temporal Worker hosting the agent with an Agent Security runtime identity.  
2. **Authorization**  
   Enforces fine-grained, policy-based access control for every gated tool call an agent makes on Temporal.  
3. **Secrets**  
   Keeps Agent Security runtime values in the customer-owned Worker environment rather than in workflow code.  
4. **Isolation**  
   Isolates each tool call in a Temporal Activity so it can be authorized, retried, and audited independently.  
5. **Audit**  
   Logs complete audit trails for agent sessions, tool invocations, and authorization decisions.  
6. **Rollout**  
   Creates the deployment with Ory Deploy or the ory-agent CLI, ships the runtime package, and verifies the protection boundary, with Observe mode for monitoring and Enforce mode for strict permission enforcement.

## More Agent Security Integrations

- **Jamf Pro Delivery Target**  
  Jamf Pro is an Apple device management platform that IT teams use to deploy software, enforce configuration, and secure Macs, iPhones, and iPads across an organization.  
  [Agent Security Endpoint Management](/content/integrations/jamf-pro-deploy-plugin/index.html)
- **Claude Code**  
  Claude Code is an agentic AI coding tool developed by Anthropic that operates directly in your terminal, enabling developers to navigate codebases, build features, debug issues, and automate routine tasks using natural language commands.  
  [Agent Security](/content/integrations/claude-code/index.html)
- **Anthropic Claude Agent SDK**  
  The Anthropic Claude Agent SDK is a developer framework by Anthropic that enables the programmatic creation and deployment of autonomous AI agents capable of multi-turn reasoning, executing code, and interacting with file systems and external tools.  
  [Agent Security](/content/integrations/anthropic-claude-agent-sdk/index.html)
- **OpenAI Agents SDK**  
  OpenAI Agents SDK is a lightweight, production-ready framework designed by OpenAI for building, orchestrating, and scaling multi-agent AI workflows with built-in tracing, guardrails, and tool integration.  
  [Agent Security](/content/integrations/openai-agents-sdk/index.html)