Self-hosted teams
Anyone running the open-source gateway has the full HTTP surface available. No license tier gates the API. Mint tokens, push policies, query audit, all from your CI pipeline or operator console.
Open source →For developers and platform engineers
IntentGate APIs
Every authorization decision the gateway makes is reachable over a clean HTTP surface. Mint capability tokens, push Rego policies, query the tamper-evident audit chain, review approvals, inspect SIEM forwarder health. The Pro console adds agent discovery, a governed inventory, and reporting on top. Apache 2.0 SDKs in Python and TypeScript.
Who builds here
One API surface. Two operating models.
Self-hosted teams use the full HTTP surface directly. OEMs and integrators embed the same primitives into their own platforms and customer workflows.
OEMs & integrators
Build IntentGate authorization into your own product or platform. Embed the SDKs, wrap the admin API in your customer console, ship policy templates as part of your offering.
Partner program →API surface
Nine endpoint groups. Four platform layers.
Runtime authorization stays on the critical path. Administration, governance, discovery, and reporting sit around it as distinct operational surfaces.
Runtime APIs
Administration APIs
Capabilities
Issue capability tokens, revoke by JTI, list active revocations. Tokens bind subject, tenant, optional per-tool scope, budget caveats, and optional step-up annotations, all signed by the gateway.
Policies
Two-stage Rego lifecycle: drafts CRUD, dry-run against synthetic or historical input, atomic per-tenant promote, one-call rollback. Hot-reloaded across replicas via Postgres LISTEN/NOTIFY.
Audit
Query the per-tenant tamper-evident audit chain, verify hash reconciliation for compliance attestation, stream CSV or NDJSON for auditor handoff and offline review.
Approvals
Human-review queue for policy-escalated calls. List pending decisions, approve or reject with operator identity captured for the audit trail.
Tenants
Tenant inventory for the console switcher. Per-tenant active policy hash, pending approval count, recent event volume. Superadmin sees all; per-tenant admin sees its own.
Integration health
Health of every configured SIEM and webhook destination: Splunk, Datadog, Sentinel, S3, webhook. Endpoint, flush counts, last error. Sensitive fields never returned. For vendor recipes, see the Integrations section below.
Governance APIs
Discovery APIs
Decision path
From agent request to approved execution.
The runtime path is intentionally linear, inspectable, and fail-closed.
User, tenant, tool, parameters, declared intent.
Token scope, expiry, revocation, delegation.
Resolved tool call versus declared task.
Rego rules, thresholds, destinations.
Tenant token and cost ceilings.
Decision, policy hash, actor, context.
Allowed calls reach the tool. Others stop.
Integration architecture
Nine lanes into the authorization plane.
The gateway fits into existing runtime, identity, policy, SIEM, storage, observability, and discovery environments without becoming another SaaS dependency.
Agent runtimes
The protocols your existing agent stack already speaks.
- Model Context ProtocolNative MCP server: initialize, tools/list, ping, tool calls.
- JSON-RPC 2.0Direct tool/call invocation for non-MCP agent runtimes.
- OpenAI AssistantsCompatible via MCP or the JSON-RPC fallback.
- LangChain / LangGraphWire the Python SDK into any LangChain Tool.
- Custom HTTP agentsAnything that can issue HTTPS and carry a bearer token.
Upstream tool servers
Any MCP-compatible or HTTP-callable backend the gateway forwards allowed calls to.
- MCP serversForward verbatim to any compliant MCP backend.
- HTTP / JSON-RPC servicesInternal microservices, SaaS APIs, database front-ends.
Identity & access
Authentication and provisioning hooks for the operator console.
- OIDCSign in against any OpenID Connect provider: Okta, Entra ID, Auth0, Keycloak.
- SCIM 2.0Provision and off-board operators from your IdP.
- TOTP step-upFresh-factor verification for destructive operations.
Policy engine
Embedded policy evaluator and the language operators write rules in.
- Open Policy AgentCNCF-graduated evaluator, embedded in the gateway. Bundle hash logged on every decision.
- RegoDeclarative policy language: destructive-verb deny-lists, bulk-row ceilings, value thresholds.
SIEM & audit forwarders
Native sinks for the audit event stream. Configure with env vars; surfaces in GET /v1/admin/integrations.
- Splunk HECHTTP Event Collector with token + optional index routing.
- Datadog Logs IntakeAPI key + site + optional service tag.
- Microsoft SentinelModern Logs Ingestion API via Azure AD service principal + DCE/DCR.
- Amazon S3Native v1.7+: Hive-partitioned gzipped NDJSON for Athena.
- Signed webhooksHMAC-signed fan-out for downstream relays (Lambda, Logic App, Mulesoft, Service Bus).
Notifications
Operator alerts on denials, escalations, approval timeouts, step-up requirements.
- SlackPer-tenant channel routing via the webhook fan-out.
- Microsoft TeamsPer-tenant channel routing via the webhook fan-out.
- PagerDutyCritical alerts for capability or budget check failures.
Storage & runtime
What the gateway depends on at runtime. Self-hosted, no SaaS dependency.
- PostgreSQLBacking store for audit, drafts, revocations, approvals, JIT elevations.
- Kubernetes (Helm)Production deployment: chart packages gateway + extractor + Postgres-backed audit.
- Docker ComposeSingle-node evaluation deployments and CI smoke tests.
- systemdSingle Go binary, no runtime deps. Drop on any Linux host.
Observability
Health, metrics, and traces for the gateway itself.
- Prometheus/metrics endpoint exposes request counts, decision rates, batch sink health.
- OpenTelemetry (OTLP)Distributed traces emitted to any OTLP collector (gRPC).
Discovery sources
Connect the tools that already see egress to AI services; matching traffic becomes a discovered agent. Push their logs to the ingest endpoint, or have the console auto-pull on a schedule.
- ZscalerSWG / SSE web logs: egress to AI endpoints by user or host.
- NetskopeCASB app events, Generative-AI app category.
- Microsoft Defender for Cloud AppsCloud app discovery and activity.
- Palo Alto PrismaPrisma Access / Prisma SaaS inline SASE + CASB sessions.
- InfobloxDNS queries + IPAM: source IP resolves to a named host.
- Generic forwardAny proxy or SIEM that can POST records to the ingest endpoint.
Developer journey
From first call to production control plane.
Start with a local decision, move into a typed SDK, then promote the same model into governed production deployment.
Run the gateway in five minutes
One Docker command, mint a token, and watch the four-check pipeline fire.
docker run ghcr.io/intentgate-app/intentgate-gatewayTyped authorization for Python agents
Three-line Gateway construction, typed exceptions, attenuation for sub-agent delegation.
pip install intentgateZero-dependency Node integration
Dual ESM/CJS, Node 18+, byte-compatible attenuation with Python.
npm install @intentgate-app/intentgateMove into policy, audit, and observability
Deploy on Kubernetes or Linux, connect OIDC, forward audit to SIEM, and expose health through Prometheus and OpenTelemetry.
Reference center
Everything required to build and operate.
API contracts, architecture, integration recipes, deployment documentation, and community support.
API reference
Every endpoint, request, response. Auth, error codes, pagination.
OpenAPI spec
Machine-readable contract. Generate clients in any language.
Architecture
Components, request lifecycle, audit chain, multi-tenant model.
AWS + Sentinel
Integration recipe for landing audit in a common SIEM topology.
Deployment docs
Operator manual and runbook. Provided to customers, login required.
Community
GitHub Discussions. Ask the team, ask other operators.
Build on the authorization gateway.
Start with the OpenAPI contract, wire an SDK into an agent, or talk to us about a platform integration.