# Teleport Beams — Trusted Runtimes for Infrastructure Agents

> Trusted runtimes for agents. Access to your infrastructure without secrets. Your inference, your harness.

**Canonical page:** [https://www.beams.run/](https://www.beams.run/)  
**Launch:** November 9, 2026 — [join the waitlist](https://www.beams.run/)

## Overview

We have what it takes to connect agents to your prod.

Beams by Teleport provides ephemeral, isolated Cloud Hypervisor micro-VMs for infrastructure agents, with virtualized networking, snapshots, delegated identity, protocol-level audit, and LLM tracing. Agents reach cloud infrastructure and inference without secrets or static API keys.

## Works with your infra.

Browse 165 integrations in a searchable, filterable card-grid directory. The interactive directory initially shows six cards, with Show more to reveal the rest.

### Agent harnesses

Pi, Claude Code, Codex, OpenCode, Goose.

### Inference

AWS Bedrock, Anthropic, OpenAI, OpenAI-compatible.

### MCP servers

GitHub, Buildkite, Sentry, Datadog, Honeycomb, Rootly, Atlassian, Slack, Grafana, HashiCorp Vault, Amazon Bedrock AgentCore Gateway, Notion.

### Infrastructure

AWS, Kubernetes, PostgreSQL, MySQL, MongoDB, Redis, Linux servers, Amazon DocumentDB, AWS Aurora, AWS CLI, AWS DynamoDB, AWS ElastiCache, AWS Elastic Kubernetes Service (EKS), AWS IAM Identity Center, AWS Keyspaces, AWS Linux, AWS Management Console, AWS MemoryDB, AWS OpenSearch, AWS RDS, AWS RDS Proxy, AWS RDS Proxy for Microsoft SQL Server, AWS Redshift, AWS Redshift Serverless, EKS Anywhere, IAM Roles Anywhere, Azure Cache for Redis, Azure SQL Server, GCP Cloud SQL MySQL, GCP Cloud SQL PostgreSQL, Microsoft Azure MySQL, Microsoft Azure PostgreSQL, Alibaba Cloud Container Service for Kubernetes, CIVO, Digital Ocean Kubernetes, Google Kubernetes Engine (GKE), K3s, Linode Kubernetes Engine, MicroKubernetes, Microsoft Azure Kubernetes Service (AKS), Minikube, Mirantis Kubernetes Engine, Orka, RedHat OpenShift, CentOS Linux, Debian, Fedora, Gentoo, OpenSUSE, Red Hat Enterprise Linux (RHEL), Scientific Linux, SSH, Ubuntu, Portworx, Azure CLI, GCP CLI, Google Workspace, Microsoft Entra ID, Microsoft Active Directory, gRPC, Tinkerbell, Windows Server, Flux, Azure, Google Cloud.

### Databases

PostgreSQL, MySQL, MongoDB, Redis, Amazon DocumentDB, AWS Aurora, AWS DynamoDB, AWS ElastiCache, AWS Keyspaces, AWS MemoryDB, AWS OpenSearch, AWS RDS, AWS RDS Proxy, AWS RDS Proxy for Microsoft SQL Server, AWS Redshift, AWS Redshift Serverless, Azure Cache for Redis, Azure SQL Server, Cassandra, CockroachDB, Elasticsearch, GCP Cloud SQL MySQL, GCP Cloud SQL PostgreSQL, InfluxData, MariaDB, Microsoft Azure MySQL, Microsoft Azure PostgreSQL, MongoDB Atlas, Oracle, RabbitMQ, ScyllaDB, Snowflake, ClickHouse, Valkey, Vitess, Microsoft SQL Server, Google Cloud Spanner, Google AlloyDB, Oracle Exadata, AWS ElastiCache Serverless, AWS RDS Oracle, AWS RDS Proxy for MySQL, AWS RDS Proxy for PostgreSQL, AWS RDS for SQL Server.

### CI/CD & IaC

Buildkite, Argo CD, CircleCI, GitLab, Harness, Jenkins, TeamCity, Travis CI, Helm, Ansible, Apollo, Puppet, Rundeck, SaltStack, Spacelift, Terraform, Crossplane, Drone, Azure DevOps, Bitbucket Pipelines, GitHub Actions, HCP Terraform, Pulumi, Ansible AWX.

### Identity

GitHub, AWS IAM Identity Center, IAM Roles Anywhere, Google Workspace, Microsoft Entra ID, Keycloak, Microsoft Active Directory, Okta, HashiCorp Vault, Auth0, OneLogin, JumpCloud, Ping Identity, OpenText NetIQ, Active Directory Federation Services, SailPoint.

### Observability

Datadog, InfluxData, Grafana, PostHog, Prometheus, Splunk, Fluentd, Metabase, Proxmox VE, Sumo Logic, Panther.

### Access requests

Datadog, Slack, Discord, Jira, Mattermost, Microsoft Teams, PagerDuty, Opsgenie, ServiceNow, Email.

### Developer tools

GitHub, GitLab, JupyterHub, Postman, Docker, Jamf Pro, Retool, Backstage, VS Code, Cursor, Zed.

## Features

### Control access (Connectivity)

Connect agents to cloud infrastructure without using secrets or passwords, with protocol introspection, LLM tracing, model routing and auto-discovery.

- Discover cloud accounts, Kubernetes clusters, PostgreSQL databases, MCP servers, and more. Authenticate without passwords using IAM, Kerberos, X.509, and other methods.
- Route inference through Amazon Bedrock and switch models while the Beam endpoint stays fixed.
- Capture SQL, Kubernetes commands and LLM input/output traces concurrently with forwarding, plus agent summaries and illustrative risk scores.

### Control the swarm (Observability)

Beams detects emergent coordination, goal hijacking, and other harmful agent behavior.

- Capture protocol-level messages.
- Capture LLM traces and out-of-band coordination (for example GitHub PR exchanges).
- Flag diverging execution threads for review.

### Control identity (Delegated identity)

Delegate user identity to agents and review agentic access requests.

- Launch tasks with delegated identity: a subset of roles and a traceable link to the delegator.
- Review and revise agent execution plans before scoped execution.
- Execute approved plans in a separate Beam; the requester does not receive resource access.

### Control the environment (Virtualization)

Beams runs agentic workloads in ephemeral micro-VMs with virtualized networking and snapshots.

- Virtual network: control egress/ingress and DNS; capture protocol traffic.
- Ephemeral VMs with snapshots: runtimes expire on a 12-hour lifecycle; restart from the last checkpoint.
- Forking and branching: build recursive fork/snapshot agentic workflows.

## Related pages

- [Beams for AWS](https://www.beams.run/aws.html) ([Markdown](https://www.beams.run/aws.md))
- [How it works](https://www.beams.run/how-it-works.html) ([Markdown](https://www.beams.run/how-it-works.md))
- [Pricing](https://www.beams.run/pricing.html) ([Markdown](https://www.beams.run/pricing.md))
- [Documentation](https://goteleport.com/docs/beams.md)