What is SatGate?
SatGate serves as a crucial governance and oversight mechanism for AI agents, managing their permissions, spending, delegation, and operational functionalities before they engage with APIs, models, MCP tools, or any external paid services. Acting as both an HTTP reverse proxy and MCP proxy, it enforces scoped authority, individual agent budgets, routing guidelines, and revocation of requests seamlessly within the workflow. To access these capabilities, agents must authenticate through recognized systems such as Kubernetes, AWS, or OIDC, after which SatGate Mint transforms the authenticated identity into a cryptographically secured Macaroon that specifies constraints on scope, budget, expiration, and the depth of delegation. The design of this architecture guarantees that permissions can only become more restrictive as requests move through chains of agents, effectively preventing sub-agents from surpassing their designated authority. Furthermore, the Observe mode meticulously monitors requests and evaluates resource utilization by categorizing data based on agents, teams, tools, routes, and cost centers, all while maintaining existing workflows. On the other hand, the Control mode establishes stringent budgetary constraints to deter unauthorized or expensive actions from being carried out. This integrated dual functionality not only ensures organizations retain comprehensive oversight but also empowers their AI agents with the freedoms they require to operate effectively. Additionally, such a system fosters a balance between innovation and risk management in the deployment of AI technologies.