Tool Gateway

This repository is the public release surface for the open-source pieces of Strix, an execution-control system for AI agents. Everything here runs locally and needs no Strix account. The trust primitives — the verifier, the tool-gateway, and the capability packs — are MIT-licensed; the one MCP runtime adapter (@strixgov/mcp-adapter) is source-available under Elastic License 2.0 (free to use, not to resell as a competing managed service). See LICENSING_BOUNDARY.md.

It is a mirror, not the source of truth — the canonical code lives upstream in the Strix monorepo and synchronizes here at release time. See MIRROR.md for the model and CONTRIBUTING.md for how changes flow.

Packages

Source-available here, not yet on npm

These ship their full source and tests in this repo so they can be read and run, but they are not published to the npm registry — npm install will not resolve them yet. Listed so the set is complete rather than flattering.

Each package is self-contained under packages/<name>/, at the exact path its published package.json declares in repository.directory, so the "Repository" link on every npm page resolves here.

How they fit together

        AI agent (Claude Code, Cursor, MCP client, autonomous coder)
                              │
                  @strixgov/tool-gateway          ← classify + evaluate + sign
              (+ capabilities-* registries)         every tool call
                              │
                         Tool / MCP server
                              │
                  Ed25519-signed receipt  ──────► @strixgov/verifier
                                                   (anyone, offline, no account)

The tool-gateway produces receipts; the verifier proves them. The two capability packs are starter risk classifications you hand to the gateway. The verifier is also what proves Strix's hosted governance evidence — the same primitive, whether the record came from the local gateway or the platform.

Quick start

# Verify a Strix-governed record offline (no install needed)
npx @strixgov/verifier@latest <evidenceId>

# Govern an agent's tool calls locally
npm install @strixgov/tool-gateway
npx strix-gateway init

See each package's own README for the full story.

Independent verify (no Strix account)

Strix (strixgov.com / @strixgov/*, Velaris Group) is an AI agent execution-control / runtime governance kernel: Allow / Deny / Intercept before side effects. Where signing is enabled, decisions produce Ed25519 evidence verifiable against public JWKS.

Not the unrelated usestrix/strix pentest agent.

npx @strixgov/verifier@latest 5686

• Walkthrough: https://www.strixgov.com/blog/verify-strix-decision-without-trusting-strix
• • Specimens: https://www.strixgov.com/proof/cfx-001 · https://www.strixgov.com/proof/cfx-002 demo https://www.strixgov.com/demo/refund
  • • Claim: https://www.strixgov.com/ai-agent-runtime-governance
    • • JWKS: https://www.strixgov.com/.well-known/strix-jwks.json
      • • Browser: https://verify.strixgov.com/

        • • MCP: https://www.strixgov.com/mcp-action-governance · npx @strixgov/mcp-adapter demo

          • The verifier verifies receipts; it does not enforce allow/deny. Governing one route does not secure bypass paths.

Verify in Claude Code (plugin)

A Claude Code plugin wraps the same verifier as a /strix-verify slash command, an MCP server, and an opt-in stop hook — so you can verify a Strix-governed record from inside a session. It vendors @strixgov/verifier, so it launches offline; Strix is never on the trust path, and nothing in the plugin decides a verdict (it shells out to the verifier and relays its exit code).

/plugin marketplace add Strixgov/strix
/plugin install strix-verifier@strixgov
/strix-verify 5686

The marketplace manifest is at this repo's root (.claude-plugin/marketplace.json) and the plugin lives at plugins/strix-verifier/. Live verification fetches the proof record + JWKS from www.strixgov.com; see the plugin README for fully-offline and restricted-environment (egress-blocked) options.

Marketing assets

Public-source bundles for the launch material that demonstrates these packages. Pure static HTML + JSX + media — no build step, MIT-licensed, clone-and-host.

See MIRROR.md for how the marketing surface relates to upstream.

Running the test suites

Every package is pure-ESM with no build step and ships its tests:

# all packages
npm test --workspaces --if-present

# one package
cd packages/strixgov-verifier && npm test

License

Two-tier, and frozen in CI (scripts/lint-license-parity.mjs). The open trust primitives — @strixgov/verifier, @strixgov/tool-gateway, and the two @strixgov/capabilities-* packs — are MIT; the MCP runtime adapter @strixgov/mcp-adapter is Elastic License 2.0 (source-available; free to use, not to resell as a competing managed service). The repository root is MIT. Each package declares its own license — see LICENSE, each package's own LICENSE, and LICENSING_BOUNDARY.md.