Why I built OLO ToolGate: authorization at the AI tool boundary

说明与用途

ToolGate通过将路由与授权分离，并记录所有决策，实现对AI工具使用的细粒度控制。

问题

AI agents can act on behalf of users, raising the need to control which tool calls they can make at runtime.

结果

ToolGate provides a policy‑driven, auditable execution flow that separates routing from authorization, enabling fine‑grained control over AI tool usage.

工作流

• Register an MCP server in ToolGate
• Scan the server’s tools and approve which to expose
• Enroll a device and obtain a permit
• When an agent requests a tool call, ToolGate evaluates policy
• If ASK, pause the call and wait for human approval
• If ALLOW, redeem the permit and execute the call
• Record request, approval, and outcome in the audit log

证据

ToolGate is an open-source, self-hosted security gateway for AI agents, MCP servers, and tool execution.

来源

For each governed invocation, it evaluates one of three decisions: ALLOW, ASK, BLOCK.

来源

The Gateway dispatches the call. The control plane evaluates authorization and issues a single-use permit. The executor must redeem that permit with the control plane before running the call.

来源

The quickstart creates separate administrator and reviewer accounts.

来源