Policy & Guardrail Console
The policy engine is deterministic: a call is permitted only if the requested scope survives the intersection of user rights, agent rights, tool rights and corporate policy. Guardrails below change gateway behaviour immediately.
Guardrails
Toggling changes enforcement live
Calls whose grounding confidence falls below this are refused rather than answered. Raise it and more calls are refused within seconds.
Effective permission
No evaluated call yet
Fire a request above or wait for live traffic.
Denied requests
Every rejection is logged with its rule
No denials in the buffer
Fire an out-of-scope or banned-tool request.
Call trail
Select any call in the live stream to open its full trail
No call selected
Click a row in the live MCP flow to inspect identity, policy decision, token and result.
Audit log
Immutable governance event trail
No events yet