> ## Documentation Index
> Fetch the complete documentation index at: https://docs.usechar.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Deployment Tiers

> How Char scales from key-only embed to enterprise governance

Char now uses a unified embed auth model across tiers: publishable key required, optional ID token for end-user identity.

## Tier 0: Key-only embed

Use a publishable key without per-user ID tokens:

```html theme={null}
<char-agent publishable-key="pk_live_..."></char-agent>
```

What you get:

* Fastest integration path
* Org-scoped runtime and ticket flow
* No IDP dependency

Tradeoff:

* User identity is synthetic (not mapped to your IDP users)

## Tier 1: Key + ID token (recommended production)

Pass user identity with `connect()`:

```ts theme={null}
agent.connect({
  publishableKey: "pk_live_...",
  idToken,
});
```

What you get:

* Per-user identity from your IDP
* Cross-app/tooling flows tied to real users
* Better auditability and access control alignment

## Tier 2: Enterprise governance

Adds governance controls on top of Tier 1:

* Policy checks
* Approval flows
* Audit workflows
* Enterprise connectors

## Migration path

1. Start at key-only (`publishable-key`)
2. Add IDP configuration and pass `idToken`
3. Add governance controls as requirements mature

<Info>
  All tiers use the same core embed contract: publishable key required, optional ID token for per-user identity.
</Info>