One control plane for agent tools.

Controller connects OpenAPI, GraphQL, and remote MCP sources, normalizes them into one searchable catalog, and exposes them through Streamable HTTP MCP.

Six parts, one platform

Controller keeps source discovery, agent execution, and operational control in one system without making them the same concern.

Gateway

Give MCP-compatible agents one stateless endpoint and a compact three-tool execution surface.

Toolkits

Publish focused catalogs for agents that should not see the whole workspace.

Runtime

Run bounded TypeScript with lazy tool discovery and no ambient host access.

Governance

Allow, pause, or block every governed call before credentials reach an adapter.

Deployment

Operate one Bun service with SQLite or PostgreSQL and explicit readiness, auth, and network boundaries.

From source to governed call

1

Discover

Read a source and normalize its operations.

2

Connect

Attach an account, environment, or region.

3

Find

Search and describe only the needed schema.

4

Decide

Match policy before the call can leave.

5

Invoke

Attach credentials and run the adapter.

  • * Stable tool addresses survive source refreshes
  • * Credentials remain outside model and sandbox context
  • * Decisions and executions remain separate audit concerns

Choose the surface for the job

Agents use the workspace or toolkit MCP endpoint. They search the catalog, execute bounded programs, and resume programs that a person approved.

  • * Streamable HTTP at the workspace or toolkit boundary
  • * Lazy discovery instead of an up-front schema dump
  • * The same policy check for every bridged tool call