# AgentSafe

> Self-hosted gateway intercepting AI agent HTTP actions, asking Decionis for authorization, forwarding only approved requests with signed evidence.

- **Category:** API Gateway
- **Licence:** Apache-2.0
- **Latest version:** v0.5.0
- **Open source:** oss
- **Languages:** Typescript
- **Platforms:** Linux
- **Tags:** Mcp, Ai Agents, Azure, Reverse Proxy, Api Gateway, Kubernetes, Docker, Helm, Aws, Authorization, Self Hosted, On Premise, Policy As Code, Audit trail, Presence, Ai governance, Helm chart, Human in the loop, Istio, Service mesh, Execution Authority, Decionis, Agent Security

## Description

AgentSafe is an execution-authority gateway that sits between AI agents or APIs and their target services. It intercepts consequential HTTP requests (writes, payments, deletions), captures them as canonical intents, and asks the Decionis control plane — an independent execution authority — for a decision: ALLOW (forward once on a single-use grant), ESCALATE (hold for human approval via Presence), or BLOCK (refuse with a signed dossier). The gateway runs in three modes: a local demo authority for testing, shadow mode to observe Decionis decisions on live traffic, and enforcement mode where nothing executes without a verified grant. It installs via Docker, Helm, Homebrew, Linux packages, or standalone binaries. The project is Apache-2.0 licensed and includes a comprehensive test suite (the Compromised Principal Test) that validates the boundary against adversarial attempts. AgentSafe does not make policy decisions itself; it enforces decisions from Decionis, which operates the policy control plane and Presence human-verification layer as separate services.

## Links

- [Homepage](https://github.com/decionis/agent-safe-pipeline)
- [Website](https://decionis.com/docs?utm_source=github&utm_medium=org_readme&utm_campaign=dev_discovery)
- [Docker](ghcr.io/decionis/agentsafe)
- [GitHub Repository](https://github.com/decionis/agent-safe-pipeline)

---
Source: https://selfhost.directory/project/agent-safe-pipeline