Nothing runs until it clears your rules. Every decision, on the record.
+ hundreds more
Every prompt and tool call passes through TapPass before it reaches the LLM or the MCP server. We check it against your policy, then allow it, hold it for a person, or block it, before the action ever executes.
You choose where enforcement lives. Same rules, same record.
Your harness connects to TapPass as its backend. Every call runs through it, checked against your rulebook, before it reaches the tool. One URL, nothing to build.
Best when you want a single endpoint your agents connect to, and enforcement handled for you.
Your app calls TapPass for a verdict before it acts. TapPass checks your rulebook and answers allow, hold or block; your app enforces it, so nothing ever leaves your control.
Best when you want enforcement inside your own app, harness or gateway.
Everything to keep agents in line, with an AI that helps you write the policy. Explore each on the platform.
Our AI reads your agents and context, then recommends the policies to set, least privilege and progressive authority by default.
Explore →Write rules in plain words. Enforced on every prompt and tool call.
Explore →One answer back on every action: allow, redact, or hold for a human.
Explore →Every action on one tamper-evident record. Evidence in seconds.
Explore →The three tools a job needs, not the thirty-four a server exposes. Authority earned over time.
Explore →TapPass sits in front of your models, your MCP servers and your gateway, and inside your own app. Scroll to see where it plugs in.
Grant tools per team, project or user from any MCP server — or compose a virtual MCP with exactly the tools a job needs.
Sits in front of OpenRouter, LiteLLM or your own router. Whitelist the models you allow; every call is checked before it runs.
Runs alongside Kong, MuleSoft or Azure APIM — or call the Verdict inline so enforcement stays where your traffic already flows.
Every decision streams to Splunk, Sentinel or Elastic as OpenTelemetry. Redacted in transit; raw data is never persisted.
Instrument your application against the governance server and hook the request path directly — no proxy in between. Published to PyPI.
Route holds to Slack, email, or a strong-auth tap with itsme. The right person decides in seconds.
Authority is earned, not switched on. TapPass grows from watching to enforcing at your pace.
Point your agents at TapPass. One line, nothing changes for them.
Every call, every tool, on the record. No rules yet.
TapPass reads the traffic and drafts your rules in plain words.
Switch on when you’re ready. From then on, agents stay inside the lines.
Insights and perspectives on running agents safely, from the people building the authority layer.
Watch first, enforce when you’re ready — live in your EU region in two weeks, on the stack you already run.
