Garudex-Labs/caracal

API gateway for purpose-based authorization for AI agents. Human approval for tasks, AI-native enforcement for agents.

An execution-authority gateway for AI agents and APIs. It intercepts consequential HTTP actions, asks Decionis whether they are authorized, and forwards exactly the authorized request once on a single-use grant, holds it for a person, or refuses it, leaving chained evidence of each. Installs by Homebrew, Linux package, Docker or Helm.

AI Agent Identity and Access Management and Inference Firewall

Self-hosted execution layer for AI agents: connect any agent to real APIs, scope exactly what it can touch, and keep credentials out of the agent's hands.

Runtime security for AI agents: discover agents, map their permissions, and enforce what they can do.

The action firewall for AI agents. Enforce policy and human approval before risky tool calls, shell commands, workflows, and production changes, with auditable evidence.

The enterprise gateway for autonomous agents. Identity management, per-channel isolation, credential vault, per-session tamper-evident audit log.

Remote approvals, policy checks, and execution evidence for unattended AI agents.

Deterministic guardrails that don't break agents