Security & Compliance

Guardrails, identity, authorization and compliance.

11 posts

Oct 22, 2026Blog

Mastra Platform incident report for October 21, 2026

Mastra Platform's October 21 incident report and timeline.

Oct 19, 2026Blog

Introducing Mastra Studio-scoped SSO

Oct 8, 2026Blog

Multiplayer agents need fine-grained context

What is fine-grained context, or FCA, and how it applies when building multi-user agents.

Sep 28, 2026Blog

Building GDPR-Ready Agents with Mastra

Data residency, PII controls, and what GDPR means for the Mastra framework vs. the Mastra platform.

Sep 28, 2026Blog

Building Secure, Governed Agents for Regulated Enterprise

HIPAA, PHI redaction, access controls, and auditability with the Mastra framework and platform.

Aug 24, 2026Article

The 9 Best AI Agent Auth Solutions (August 2026): Features, Use Cases, and Architectures

This guide compares nine AI agent auth solutions, explains how they approach identity and authorization, and helps you choose the right auth infrastructure for your AI application.

Aug 19, 2026Blog

Introducing Fine-Grained Authorization for Mastra

Per-user, per-resource permissions for routes, agents, workflows, tools, memory, and MCP servers.

Aug 10, 2026Blog

Introducing Sensitive Data Redaction for Mastra Observability

Automatically redact sensitive customer information from agent traces.

Aug 2, 2026Article

Guardrails for AI agents: a practical guide for TypeScript developers

Learn how to implement guardrails for AI agents in TypeScript, from input validation and PII detection to tripwires, classifiers, and observability.

Mar 17, 2026Blog

Introducing Studio Auth: Secure, Team-Friendly Access for Deployed Mastra Studios

Secure your deployed Mastra Studio with login screens, third-party identity providers, and role-based permissions.

Jul 30, 2025Blog

Building low-latency guardrails to secure your agents

How we built a suite of out-of-the-box input processors and optimized them from 5000ms to under 500ms per request.

Ship better agents

Create a new Mastra project. Mastra is a framework for AI applications and agents on a modern TypeScript stack. Before running the command, ask these questions one at a time and wait for each answer unless it was already provided:

Project name? (default: "my-mastra-app")
Provider? (required; options: "openai", "anthropic", "google", "xai")
If the provider isn't supported, ask again and list the supported values.

Run: `npm create mastra@latest <project-name> -- --llm <provider>`

The command creates a default Mastra project, installs Mastra skills for detected coding assistants, and initializes Git when appropriate.

After creation, enter the project directory and start the dev server: `npx bgproc start -n <project-name> -w -- npm run dev`

Open Mastra Studio at `http://localhost:4111`. Studio is the interface for building, testing, and managing agents, workflows, and tools.

Also mention that the Mastra model router provides access to thousands of models: https://mastra.ai/models

Quickstart