Thoth overview
Decide what your AI agent may do before it acts, then inspect the decision.
Thoth, from Aten Security, governs AI agent actions at the moment they execute. The SDK and proxy put that check between an agent and its tools.
The action loop
- Agent proposes a tool callWho is acting, on what, and for whom?
- Thoth evaluates policyALLOW · STEP_UP · BLOCK
- Execute only when permittedInspect the decision and available evidence
ALLOW permits execution. STEP_UP waits for an authorized approval.
BLOCK refuses the action. Keep the tool behind the governed wrapper so a
model cannot bypass that decision by calling the original function.
Start with one agent
Need a tenant first? See Trial access and setup. Already integrating? Use the SDK references or REST API reference.
Choose another integration
| Your task | Start here |
|---|---|
| Govern an agent written in Python, TypeScript, or Go | Install an SDK |
| Govern external MCP tools used by Claude Desktop | MCP proxy |
| Configure existing governance settings as code | Terraform or Pulumi |
| Manage an enterprise endpoint fleet | Deployment guides |
| Reconcile tenant settings in Kubernetes | Kubernetes operator |
| Investigate or recover a deployment | Operations |
The MCP proxy checks other servers' tool calls; it does not expose Thoth configuration as MCP tools. Use the configuration providers or control-plane CLI/API for supported administrative tasks.
Understand what you verified
A policy decision, a completed tool call, a behavioral event, and a signed
receipt are different records. Inspect the reason, actor context, and
correlation identifiers in your environment. Verify receipt signatures and
available exports before treating them as evidence for an external review.
A user_id supplied by your application is attribution context; it does not
by itself prove a human authorized an action.
Read Core concepts for scope, sessions, approvals, and failure behavior. SDKs, proxies, and infrastructure providers have separate release versions; pin and validate the releases you use.