Docs

Deploy, configure, operate

The deployment runbook below is the primary customer-facing document for platform engineering and security operations teams. Per-feature deep-dives, API references, and SDK guides land on docs.intentgate.app as the docs site comes online.

Primary document

IntentGate Deployment Runbook

23-page operational guide. Prerequisites, install paths (Helm / Docker Compose), day-1 configuration, day-2 operations, troubleshooting, incident response runbooks, full environment variable reference, and admin API reference.

Request the PDF

Gateway

Self-hosted authorization service. Go binary, embedded OPA, multi-tenant, tamper-evident audit chain.

SDKs

Agent-side libraries. Issue, attenuate, present capability tokens. Byte-compatible between Python and TypeScript.

  • pip install intentgate

    Python 3.10–3.13. PyPI · GitHub

  • npm install @netgnarus/intentgate

    Node 18+, dual ESM/CJS, zero runtime deps. GitHub

Quick install

# Generate secrets (kept in your secret manager)
ADMIN_TOKEN=$(openssl rand -hex 32)
MASTER_KEY=$(openssl rand -hex 32)

# Postgres connection
kubectl create namespace intentgate
kubectl -n intentgate create secret generic intentgate-db \
  --from-literal=url='postgres://...'

# Helm install
helm install intentgate \
  oci://ghcr.io/netgnarus/charts/intentgate \
  --namespace intentgate \
  --set gateway.image.tag=1.6.0 \
  --set gateway.adminToken.value=$ADMIN_TOKEN \
  --set gateway.masterKey.value=$MASTER_KEY \
  --set postgres.existingSecret=intentgate-db \
  --set audit.persist=true

# Verify
kubectl -n intentgate port-forward svc/intentgate-gateway 8080:8080 &
curl http://localhost:8080/healthz
# {"ok":true,"version":"1.6.0"}

Mint your first token

curl -X POST $GATEWAY/v1/admin/mint \
  -H "Authorization: Bearer $ADMIN_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
    "subject":      "agent-trade-bot",
    "tenant":       "default",
    "ttl_seconds":  86400,
    "tools":        ["read_invoice", "send_email"],
    "max_calls":    1000
  }'

# Returns {"token": "eyJ...", "jti": "...", ...}
# Token shown ONCE. Store in your agent's secret manager.

Full docs site coming with v1.0

Per-feature deep-dives, runnable code samples, SDK references, and the change log will land at docs.intentgate.app. Today the deployment runbook + GitHub READMEs cover the install and operate paths.

Request the runbook PDF