Platform / Integrations

Does it meet the stack you already run?

GovernorAI governs agents it did not build, on infrastructure it does not own — so every integration here is an insertion point into something you already operate, not a platform you are asked to move onto.

Nothing required inside the agent You keep the credentials Fail-closed at every seam

ENFORCEMENT SEAMS

Where the decision is applied.

If a gateway already sees the call, that is where the decision goes. Each adapter is a thin protocol translator: it parses the tool call off the wire, builds the canonical execute request, and expresses the verdict in that protocol's own terms.

01Gateway and proxy adapters

Seam
How the decision is applied
Adapter
Envoy ext_proc
Envoy Gateway, Istio, Gloo, Envoy AI Gateway and agentgateway. Allow continues, redact becomes a body mutation, pause returns 202, deny returns 403. failure_mode_allow: false is required.
governor-extproc · :9002 gRPC
Transparent MCP proxy
No gateway required at all — point the MCP client's server URL at the proxy, or chain it inside an existing one. tools/call is governed; initialize, tools/list, ping and notifications pass through untouched.
governor-mcp-proxy · :9003 HTTP
HTTP forward-auth
NGINX auth_request, Traefik ForwardAuth, an AWS Lambda authorizer, Apigee or Azure APIM. Allow returns 200, deny returns 403. This pattern cannot rewrite a body.
governor-checkgw · :9004 HTTP
SDK / function wrap
Wrap the call in a few lines. You keep the credentials, the tool code and the control flow — GovernorAI is not a proxy in front of your model provider.
thin client

02LLM gateways — governing the model call itself

LLM gateway
How GovernorAI attaches
Governs
Portkey
Registers as a webhook check on the gateway you already run.
the model call
LiteLLM
Registers as a CustomGuardrail.
the model call
Envoy AI Gateway
Registers as an ext_proc filter.
the model call

The gateway keeps the provider credentials, the connection and the retry behaviour. GovernorAI registers as a guardrail on the gateway that is already there and answers a question; it does not sit in the token path.

Honesty note

Shaped-argument materialization end-to-end is live for the AWS Bedrock inbound seam today. Until the generalized gate lands, the other adapters enforce allow, deny and pause end-to-end but do not return shaped arguments. Forward-auth cannot rewrite a body at all, by protocol — it emits a header instead. Both limits are properties of the seam, not roadmap language.

PLATFORMS

Named platform coverage.

Each of these has a page describing exactly what is and is not governed at that seam.

Platform
Coverage
Seam
AWS Bedrock
Inbound seam with guardrail attachment. End-to-end shaped arguments returned to an inbound self-execute caller are materialized for this seam today; generalizing that gate is tracked work.
inbound
ServiceNow
Now Assist discovery and scoped control.
inbound
Model Context Protocol
Registry, transparent proxy and argument-aware inspection.
proxy

DISCOVERY SOURCES

Where unregistered AI activity shows up.

The discovery surface is derived from live wiring, so it cannot claim a source the backend cannot actually ingest.

01Agent frameworks

Framework
How it appears
Method
LangChain / LangGraph
Framework runtime installs that group many agents under one process.
registered
CrewAI
Framework runtime install, grouped under one process.
registered
n8n
Framework runtime install, grouped under one process.
registered

Framework runtimes are registered rather than found: an operator declares them, or they heartbeat themselves in. A framework install groups many agents under one process, so it is counted once, not once per agent.

02Identity and consent

Source
What it surfaces
Signal
Okta
System Log — OAuth grants and application sign-ins to AI apps.
consent · sign-in
Microsoft Entra ID
Directory audit events.
consent · sign-in
Google Workspace
Admin Reports API.
consent · sign-in

03SIEM, log and telemetry

Destination
Parsing contract
Direction
Splunk
HTTP Event Collector, including the batched newline-delimited stream: the event envelope is unwrapped and indexed fields merged.
ingest
Microsoft Sentinel
Azure Monitor / Log Analytics common-schema columns, with both the records export and value query envelopes unwrapped.
ingest
Datadog
Logs intake, decomposing ddtags into user, host and env dimensions and reading the nested attributes object.
ingest
Generic SIEM webhook
Webhook delivery for anything not named above; plain log lines are also accepted.
ingest
OpenTelemetry
Metrics under a single namespace — governor.request_count, governor.request_latency, governor.policy_evaluation_duration.
export

DECLARE AND OPERATE

Policy as a reviewed artifact.

Surface
What it does
Form
Terraform provider
Declare policy as a reviewed artifact rather than a console setting.
declarative
Remote OPA
Keep the policy engine you already run; GovernorAI does not require its own.
per deployment
Honesty note

This catalog lists only what an adapter, connector or parsing contract exists for. Environments we ask about during a briefing — Azure AI Foundry, Vertex, Salesforce, OpenAI Agents, Semantic Kernel, AutoGen — are questions about your stack, not claimed integrations, and are deliberately absent from the tables above. No integration count is stated anywhere on this page: a number invites a comparison the number cannot survive, and the seam is what determines whether governance is possible, not the tally.

Continue