A hard stop between your agents and your budget.

okgate sits between your agents and their MCP servers and refuses the calls your policy does not allow. Spend caps and a kill switch per run. Loops broken before they bill. Destructive writes faked in dry-run with the diff you would have shipped. Every call in a hash-chained audit log with daily Merkle roots on a public page, so the spend is not just capped but provable afterwards.

Built for whoever owns the bill. In 2026, 73% of organisations overshot their AI spend plan and agentic projects overshot by 2.4×; the common shape is an agent that loops, retries, or fans out overnight with nobody watching. The OSS proxy enforces all of it locally and free. Hosted adds the dashboard, alerts, the ledger, and the "what would this run have cost and destroyed" report.

Sign in with GitHubGet your spend report
1 · Create a proxy (20 s)
Paste your MCP server URL. You get a per-customer endpoint and a key.
2 · Connect (30 s)
npx -p @agentwares/agentguard okgate connect agk_…
Writes .mcp.json for Claude Code / Cursor, or paste the URL into any MCP client.
3 · Watch the first run
Calls stream into the dashboard. Dry-run fakes the writes and shows what would have changed. Flip to enforce when it looks right.

Bands, not a meter

Soft alert at 80%. Hard stop at 150% with a one-click upgrade — never a surprise bill.
Trial
$0/mo
  • 1,000 tool calls/mo
  • hosted proxy, dashboard
  • no card
Starter
$29/mo
  • 100,000 tool calls/mo
  • 30-day audit log
Pro
$99/mo
  • 1,000,000 tool calls/mo
  • 90-day audit log
  • least privilege
  • spend ledger
  • chaos mode
  • drift alarm
  • pii audit
Team
$299/mo
  • 10,000,000 tool calls/mo
  • 365-day audit log
  • least privilege
  • spend ledger
  • chaos mode
  • drift alarm
  • pii audit
  • policy sync
  • approvals
  • compliance export
  • erasure

Machine-readable: /pricing.json. Agents: /llms.txt, MCP at /api/mcp. Proxy endpoints look like https://agentwares-agentguard-proxy.vercel.app/<proxyId>/mcp.

What the agent sees when it is stopped
{"code":"LOOP_DETECTED",
 "cause":"crm_get_contact was called 4 times with identical arguments within the last 30 calls (max 3)",
 "fix":"you are looping. Do not repeat this call; change the arguments, use a different tool, or stop and report what you tried",
 "retryable":false}
What you see
An incident-shaped run report: calls, writes, faked writes with the intended mutation, blocked calls with their code, spend by rail, the chain verification and the day's Merkle root. Alerts by email, Slack or Discord when a run is halted or a band hits 80%.

Free tools

No account and no card.
  • agent-cap: a dollar ceiling for Claude Code, Codex and Gemini CLI
  • AI disclosure: an EU AI Act Article 50 readiness check
  • booksguard: approve AI changes to QuickBooks and Xero before they post
  • Hiring record: the records and notices Colorado's AI hiring law asks for
  • Agent-merge audit: which merges an AI agent wrote, and who approved them
  • Spend report: paste an agent log and see what it spent, and the cap that would have stopped it