Torrix
GitHubStart free

Agent authorization and observability

The system of record for AI agents.

Know what every agent was allowed to do, and what it actually did. Torrix checks each action before it runs and records every model call, tool call, cost and approval that goes through it. Your data stays on your servers.

Govern your agents
$

Integrations

Works with your agent stack. And with any MCP server.

Problem

Agents now spend money and change records. Few teams can say who allowed it.

LogsShow what an agent did.
Identity toolsShow who it is.
Neither showsWhich person authorized the action, under which policy, and what happened next.

One record

Allowed and happened, joined.

Most tools show one side. Torrix links every authorization decision to the run it gated, by trace and run ID, so one record answers who allowed it, under which policy, and what actually happened.

Pro (10 agents) and Enterprise

Allowed.

  • Agent identities and signed grants
  • Policy, risk scoring and limits
  • Single-use approvals
  • Governed MCP gateway

Agent governance

Free and source available

Happened.

  • Every call you route through Torrix
  • Traces and agent trees
  • Tokens, latency and cost
  • Budgets and hard caps

Observability

Control · Pro and Enterprise

Decide what agents may do, before they do it.

Every tool and MCP call through the Torrix gateway is checked against who the agent acts for, its delegated scope and your policy.

  1. 01

    Identify

    Know which agent is acting and on whose behalf, from a verifiable credential.

  2. 02

    Authorize

    Evaluate delegation, policy, scope, context and risk on every governed call.

  3. 03

    Enforce

    Allow, require approval, or deny before the action reaches the downstream system.

Explore agent governance

Observe · Free

See what happened, as it happens.

Every model call, tool call and MCP call that goes through Torrix is recorded with its prompt, response, tokens, cost and latency, and linked into the agent run it belongs to.

  • Live cost by model, app, user and project
  • Prompt traces and agent trees, failing step highlighted
  • Latency per call, time to first byte on streams
  • Budgets and hard caps that refuse calls before they reach the provider

Explore observability

Runs / Liveproxy · ingest · otel
Requests18,
Tokens41,277,910
Spend, month to date$412.38
Budget used68.7%
Latency, last 64
LiveLive cost by model, app, user and projecttrace_9a1b

Enforcement

Make the guard the only way in.

  • Credentials: agents hold only Torrix credentials, never the downstream keys.
  • Attestation: every forwarded call carries a signed, 60-second token the server verifies.
  • Network: Protected servers accept traffic only from Torrix. Turn on signed calls (Enterprise) and verify them on your server, or block direct network access.
x-torrix-attestation
{
  "iss": "torrix",
  "aud": "erp-mcp",
  "sub": "agent_procurement",
  "mcp_method": "tools/call",
  "tool": "create_purchase_order",
  "args_sha256": "9f2c…41ab",
  "decision": "allow",
  "request_id": "authz_5d81",
  "trace_id": "trace_9a1b",
  "jti": "b7e0…c2",
  "exp": now + 60 s
}

Security and trust

Agent

procurement-agent

On behalf ofMaria Chen · Finance ops
Callserp-mcp · tools/call create_purchase_order
Forwarded call
Gateway / erp-mcptools/call
CredentialsTorrix only
AttestationES256 · 60 s
NetworkTorrix only
Gateway onlineSigned · expires in 60 strace_9a1b
x-torrix-attestation
erp-mcp · MCP serverVerifying

Checks every forwarded call

  • Signature (ES256, key from JWKS)
  • Issuer and audience
  • Not expired
  • Method and tool match
  • Arguments digest matches body
  • jti not seen before

accepts traffic only from Torrix

Design partners

Built first for finance and procurement agents.

Agents that create purchase orders, pay invoices or change vendor records, running against the systems you already use, such as SAP, ServiceNow or Salesforce. If that is you, build the playbook with us.

Become a design partner

  • Create purchase orders
  • Pay invoices
  • Change vendor records

Start

Start free. Govern when you are ready.

Run one Docker command for free observability. For agent governance, leave your email and we will set it up with you. A 30-day trial license is available.

Docker
$ docker run -d --name torrix \
    -p 8088:8088 \
    -v torrix_data:/data \
    gettorrixai/torrix:latest
Open http://localhost:8088, create your account, and go to Integrations.
Compare editions