Early Access — Open for developer integration testing

CAIRL/keys

MFA authenticator and account security

Manage TOTP authenticator entries, passkeys, and CAIRL account-security methods from a single control surface.

What it does

Keys is the identity-context module for MFA and account security. Instead of treating second factors as disposable setup steps, Keys gives the person one place to manage authenticator entries and security methods tied to their CAIRL account.

That includes TOTP authenticator entries, one-time code generation, and supported passkey/account-security operations without leaving the CAIRL identity surface. It is not a generic password, note, or connection-credential vault.

For CAIRL, Keys also reinforces the broader architecture: identity is something the user carries and controls, while external systems receive the assurance they need from the governed boundary around it.

Key capabilities

TOTP storage

Keep authenticator secrets in the identity context instead of scattering them across devices and ad hoc tools.

Code generation

Generate one-time passwords from the same interface used to manage the account inventory.

MFA method management

Organize supported MFA methods and update them as account-security needs change.

Identity-context control

Treat MFA as part of the user's controlled identity layer rather than a disconnected utility.

Ready when you are

Move from explanation to implementation.

CAIRL is built to let users control identity and let platforms trust the result. Choose the next step that matches the surface you are building.