Works With The Stack
You Already Run.

Evaluate and execute from any language with one action envelope.

Call POST /api/v1/action-requests/evaluate with the agent's key before each protected tool.

Put AgentPlane in front of any MCP server by changing one URL. No code changes in the agent.

Today: Point your agent at the gateway URL instead of the MCP server. Each tool call is evaluated before it is forwarded.

Wrap tools with a guard node so every call is evaluated.

Today: Until the wrapper ships, call the REST API from a tool node.

A tool guard for function tools and hosted tools.

Today: Until the wrapper ships, call the REST API inside each function tool.

A pre-tool-use hook that asks AgentPlane before each tool runs.

Today: Until the wrapper ships, call the REST API from a PreToolUse hook.

Approval requests, reminders, alerts, invites and password resets.

Set RESEND_API_KEY and EMAIL_FROM. Without them, messages go to the developer mailbox.

Approve or deny held actions from Slack, bound to the same payload hash.

Today: Approval emails link to a page that works on mobile in the meantime.

Approval cards in Teams, with the exact payload and expiry.

Today: Approval emails link to a page that works on mobile in the meantime.

Redacted JSON or CSV export of the hash-chained audit trail.

Download from Audit trail, or pull /api/v1/audit-events/export with a read-only API token.

Stream audit events to Splunk HTTP Event Collector.

Today: Pull with a read-only API token on a schedule until streaming ships.

Send audit events and decision metrics to Datadog.

Today: Pull with a read-only API token on a schedule until streaming ships.

Single sign-on and SCIM provisioning, on Business and Enterprise.

Today: Use email and password with invites until then.