#6565th of 82 in Agent frameworks and SDKs

agent-governance-toolkit

Policy enforcement, identity and audit for AI agent tool calls

Stars
6.5k
License
MIT
Last commit
Oct 2026
Last release
Jun 2026
Language
Python
Stars, last 30 weeks+5,847
4 Apr 2026: 657 stars11 Apr 2026: 931 stars18 Apr 2026: 1,088 stars25 Apr 2026: 1,234 stars2 May 2026: 1,341 stars9 May 2026: 1,428 stars16 May 2026: 1,533 stars23 May 2026: 1,843 stars30 May 2026: 3,447 stars6 Jun 2026: 4,023 stars13 Jun 2026: 4,221 stars20 Jun 2026: 4,380 stars27 Jun 2026: 4,490 stars4 Jul 2026: 4,613 stars11 Jul 2026: 4,730 stars18 Jul 2026: 4,811 stars25 Jul 2026: 4,868 stars1 Aug 2026: 5,505 stars8 Aug 2026: 5,757 stars15 Aug 2026: 5,898 stars22 Aug 2026: 6,043 stars29 Aug 2026: 6,107 stars5 Sept 2026: 6,160 stars12 Sept 2026: 6,213 stars19 Sept 2026: 6,260 stars26 Sept 2026: 6,316 stars3 Oct 2026: 6,360 stars10 Oct 2026: 6,393 stars17 Oct 2026: 6,420 stars24 Oct 2026: 6,464 stars31 Oct 2026: 6,504 stars

657 on 4 Apr 20266,504 on 31 Oct 2026

From GitHub's daily star counts.

Checked on GitHub.

Overview

Intercepts agent tool calls, messages and delegations in application code and checks them against YAML, OPA or Cedar policies before they execute. Adds agent identity (SPIFFE/DID/mTLS), tamper-evident audit logs, privilege-ring sandboxing, SRE controls such as a kill switch, and an OWASP compliance CLI. SDKs exist for Python, TypeScript, .NET, Rust and Go, with adapters for LangGraph, CrewAI, AutoGen and others.

Who it is for: Teams deploying autonomous agents that need policy enforcement and audit trails

Strengths

  • Deterministic deny at tool-call level, not prompt-level; two-line `govern()` wrapper to start
  • SDKs in Python, TypeScript, .NET, Rust and Go, plus Claude Code and Copilot CLI plugins
  • Adapters for Semantic Kernel, LangGraph, CrewAI, OpenAI Agents SDK, LlamaIndex, Haystack and others
  • RFC 2119 specs with conformance tests; `agt verify` checks OWASP compliance in CI

Weaknesses

  • Public preview; README warns of breaking changes before GA
  • Python has the full stack; other language SDKs cover only core governance
  • Packaging is in flux: 45 packages consolidated into 5, old names deprecated or stubbed
  • Only governs actions routed through its hooks; unwrapped tools are not covered

What it needs

  • no GPU
  • Docker + Compose
  • Needs Python 3.11+ (quick start), Optional Azure credentials for Azure features
  • Models: Model-agnostic; governs tool calls for any agent framework

Quick answers

Is agent-governance-toolkit open source?

Yes. Its code is on GitHub under the MIT license.

Can you run agent-governance-toolkit with Docker?

Yes. Its repository has a Docker setup: a Dockerfile, a Compose file or a published image.

Does agent-governance-toolkit need a GPU?

No, it runs without one.

Also in Agent frameworks and SDKs

See all 82
Also in Agent frameworks and SDKs
RankProjectScore
1ppt-masterAgent skill that turns documents into natively editable PowerPoint decks Live demo ↗ (opens in a new tab)72k starsMIT95 out of 100
2openai-agents-pythonPython SDK for multi-agent workflows with handoffs, guardrails and tracing30.4k starsMIT90 out of 100
3langchainPython framework for building LLM agents and apps from interoperable components148.8k starsMIT89 out of 100
#4browser-usePython library that lets an LLM agent control a web browser Live demo ↗ (opens in a new tab)119.7k starsMIT89 out of 100
#5tradingagentsMulti-agent LLM framework that simulates a trading firm's analysis process Live demo ↗ (opens in a new tab)119.3k starsApache-2.089 out of 100