Autonomy, with
accountability.
Give your agents room to work.
Keep the authority to decide.
One control plane for model calls, tool execution, and resource access. Know what happened, why it happened, and who approved it.
KEEPS YOU IN CONTROL.
Three gateways.
One source of control.
Agents cross boundaries all the time.
Descles puts a decision point at each one.
Permission before execution.
Evaluate tool calls against policy. Allow routine work, deny forbidden actions, and send sensitive operations to a human for approval.
# Every request has a responsible identity
agent research-agent
gateway action
request github.create_issue
policy require_approvalAn agent is only as trusted
as what it acts on.
A sandbox controls what an agent can touch. Descles also tracks why it believes something—and whether that knowledge should authorize an action.
Read the product thesisLet agents act.
Decide where they pause.
Try an illustrative approval flow.
You make the call. The trail stays clear.
Publish a GitHub issue
This skill was generated from an external source. Its provenance stays attached when it requests a write action.
An identity behind every action.
Scoped credentials and delegation chains connect agents to the people responsible for them.
Skills with a history.
Track source, version, declared permissions, and publish approval through the skill lifecycle.
A trail you can verify.
Durable, tamper-evident audit records with Ed25519 signatures preserve the decision trail.
Your stack.
A clearer boundary.
Start the self-hosted demo with built-in scenarios. Explore the three gateways without a model API key.
Read the setup guide# Clone and start the local demo
git clone https://github.com/chiatzenw-cur/agent-control-plane.git
cd agent-control-plane
go run ./cmd/demo
# Open the console, then use the printed operator token
http://127.0.0.1:8088/demo/demo.htmlThe next step for your agents?
A clear chain of trust.
Explore the demo Available as a self-hosted prototype. Production hardening is ongoing.