Introducing Stargate

Most teams that run their own infrastructure accept a tradeoff. Management happens at a few workstations with the right client installed, server credentials sit on those machines, and every server has to be reachable from them. That's manageable with two operators in one office. It gets harder as you add people, sites and contractors, and when an on-call engineer needs to fix something from a laptop they don't normally use.

Stargate removes that tradeoff. It gives your team access to your entire Starlight environment from a web browser, and your servers don't have to be exposed to make that happen.

One front door for your environment

Your team signs in to Stargate, and Stargate connects to your servers for them. Hosts stay on your private network, and credentials stay inside Stargate instead of being copied to laptops. When someone leaves the team, you remove their access in your identity provider. You don't have to go hunting through individual machines. Starlight 1.6 makes that possible with SCIM and Cedar: SCIM pushes the change from your provider to Starlight, and Cedar, the open source policy language that came out of AWS, decides what every identity can do. Policy is evaluated locally on the platform, so a revoked user stays revoked on infrastructure that is disconnected from the network. Read more about Cedar and SCIM in Starlight.

Sign-in uses the provider you already run, so your existing policies for onboarding, offboarding and multifactor authentication apply as they are. Every action goes through the same controlled path, which gives your security team one place to review activity instead of a dozen. The Starlight desktop app can connect through Stargate as well, so people at their desks and people on the road use the same secure route into your infrastructure.

What you can do with Stargate

Stargate covers the work your operators do every day:

• Manage virtual machines, containers, Kubernetes, AI and agents. Create, start, stop and reconfigure from any browser.
• Open RDP sessions in the browser. Connect over SSH, remote desktop or console without extra software.
• Protect your work. Take snapshots before risky changes and restore them when you need to.
• Run storage and images. Manage disks, storage pools and images in one place.
• Control networking. Create and manage the networks your workloads depend on.
• Catch problems early. Set alarms and watch them update as conditions change.
• Keep credentials secure. Store secrets and SSH keys in an encrypted vault only their owner can access.
• Use your own sign-in. Use single sign-on through your organization's OIDC or SAML provider.
• See every site together. Switch between locations and see the servers, clusters and resources at each one.

Ready for AI assistants

Teams are starting to connect AI tools to their infrastructure, and Stargate gives them a governed way to do it. The Starlight MCP server is part of the platform, not an add-on, and it answers to the same Cedar policies as everything else.

An agent connected over MCP is a principal like any other. It acts with the same permissions as the person using it, and administrators decide what it can do, down to read-only access. Every tool call is checked against policy before it runs, and anything not explicitly permitted is denied. If policy says an identity cannot touch production storage, it does not matter whether that identity is a person in the console or an agent on a tool call. Every decision is logged in the same place as human activity.

Passwords and other private inputs stay in protected forms and are never handed to the model. That lets teams put agents to work on real infrastructure without handing them the keys.

What it means for your team

Stargate shortens the time from noticing a problem to fixing it, because any authorized team member can act from any browser. It reduces risk by keeping servers private and credentials centralized. It simplifies access management by working with the identity provider you already trust.

Your operators move faster, and your security team keeps control.