Create account
Account is the commercial and governance boundary. Use one account per company, team, or controlled business unit.
account_id = acct_acme
Access Management
MatrixArk treats account, tenant, user, session, and API key as first-class boundaries. Start with a cloud account or local deployment, then issue scoped keys for Codex/Cursor hooks, MCP servers, batch ingestion, and admin automation.
Sign in / Register
Verified Gmail/Google and GitHub identities map to a MatrixArk user; email accounts store a salted PBKDF2 hash. Identity and API-key hashes persist in MatrixKV SQL or MySQL — never a raw token or password.
Registration
End users can subscribe to MatrixArk Cloud. Enterprise teams can run local or on-prem deployments for free/open-source TemporalStore and use MatrixArk Cloud services later. The identity model stays the same in both cases.
Account is the commercial and governance boundary. Use one account per company, team, or controlled business unit.
account_id = acct_acme
Tenant is the workspace boundary. Use tenants for prod, staging, departments, regulated data, or customer environments.
tenant_id = tenant_prod
User ids come from the app, hook, or SSO provider. MatrixArk maps them to stable hashes before context is stored.
user_id = alice
Issue different keys for hooks, MCP tools, batch ingestion, feedback, and admin automation. Keys can be user/session scoped.
scope = context:retrieve
Apply For API Key
Agent memory lessons
Modern coding agents need organized memories, resources, and skills instead of flat chunks — and long-running applications need session batches, event/entity memory, operators, temporal compression, and time-aware recall. MatrixArk delivers this on an open, self-hostable stack: it keeps the caller surface simple while adding account, user, session, and API-key governance, backed by your own MatrixKV SQL or MySQL.
Issue scoped keys for Codex/Cursor hooks that send one message at a time, retrieve ContextPacks before the LLM call, and ingest assistant/tool output after the call.
Issue batch-ingestion keys for session windows, rolling commits, idle-time commits, and one-pass extraction across 20-message logical batches.
Issue resource-ingestion keys for files, runbooks, skills, and operational knowledge, then let MatrixArk attach L0/L1 summaries and TemporalStore indexes.
Issue admin keys separately for account status, user lifecycle, key rotation, SSO mapping, audit replay, and emergency tenant disablement.
Access Management
Disable one tenant for an isolation incident or disable the whole account for a customer suspension without deleting historical context.
Register, list, enable, or disable users. Disabled users are blocked for API-key-authenticated context calls.
Create, list redacted metadata, rotate, revoke, and expire keys. Raw keys and hashes are never returned by inventory APIs.
Every context and admin operation records account, tenant, role, key id, user id, session id, and timestamp for replayable governance.
MatrixArk Cloud
Send your preferred account id, tenant id, integration type, and expected context volume. We will issue scoped keys for the right deployment mode.
Cloud subscription for end users and teams. Local/open-source TemporalStore setup for developers and on-prem enterprise pilots. API-key roles map cleanly to each flow: hook, retrieval, resource ingestion, session batch extraction, feedback, replay, and admin governance.
founders@matrixark.ai