Cadenya
Freemium
Developers building agentic workflows
Agent Governance Toolkit
FreeOpen SourceAPISelf-HostedAgentic
Microsoft's governance layer for autonomous agents addresses all ten OWASP agentic AI risks with deterministic, sub-millisecond policy enforcement.
Free tier: No tier limits; toolkit is fully open-source under MIT license with no restrictions on usage, deployment, or commercial applications
Similar tools
CadenyaFreemiumCadenya is an agent runtime built around a layered model: tools connect once through MCP…
WorldsFreemiumWorlds spins up a sealed twin of the external systems your agent touches — Stripe and Zendesk…
JevProxyFreemiumThe proxy sits in front of your Cursor or Claude Code agent fleet and classifies incoming tool…
Brain MemoryFreeBrain Memory stores agent decisions as Markdown files with YAML frontmatter, organized in a…
Get This Tool
License: MIT Any use incl. commercial
Local-run terms: Licensed under the MIT License, permitting unrestricted use, modification, and distribution in both personal and commercial contexts. Microsoft believes agent governance is too important to be controlled by any single vendor and aspires to move the project into a foundation home where it can be governed by the broader community.
Screenshots 1
Summary
This is a policy engine that sits between your AI agent code and execution, enforcing security rules without requiring a rewrite of the agent itself. The problem: autonomous agents in production face ten distinct attack vectors—prompt injection, excessive agency, hallucination-driven actions, and others—that traditional application security doesn't cover. The differentiator is breadth: this toolkit addresses all ten OWASP risks in a single framework, hooks into LangChain and other agent frameworks at their extension points, and ships SDKs for TypeScript and .NET. It's free. The honest catch: it runs application-level governance in the same process as the agent, so production deployments require containerizing each agent separately rather than relying on kernel-level isolation.
Bottom line: *Use this if you're running agents in regulated industries or multi-tenant systems where compliance and containment matter more than simplicity.*
Pricing Plans
Free- Free Tier
- No tier limits; toolkit is fully open-source under MIT license with no restrictions on usage, deployment, or commercial applications
Open Source
Free
Full-featured MIT-licensed open-source toolkit with all governance capabilities
- Policy enforcement engine
- Zero-trust identity management
- Execution sandboxing
- Compliance verification
- SRE telemetry and tracing
- Reinforcement learning governance
- Plugin marketplace governance
View full pricing on microsoft.com →
Pricing may have changed since last verified. Check the official site for current plans.
Find your fit
Before you choose Agent Governance Toolkit
More options in Agent Frameworks. Compare pricing, platforms, and features side by side.
Brain Memory
Free · Open source
Long-term continuity in multi-session coding projects
Pros
- First toolkit to address all 10 OWASP agentic AI risks with deterministic, sub-millisecond policy enforcement
- Framework-agnostic from day one, hooks into framework native extension points so adding governance does not require rewriting agent code
- Available across language ecosystems with TypeScript SDK through npm and .NET SDK through NuGet
- Structured as monorepo with independently installable packages allowing incremental adoption
- Ships with 9,500+ tests and includes SLSA-compatible provenance, OpenSSF Scorecard tracking, CodeQL scanning, and Dependabot dependency monitoring
Cons
- Provides application-level governance, not OS kernel-level isolation; policy engine and agents run in same process, so production recommendation is to run each agent in separate container
- Toolkit is currently in public preview and may have breaking changes before GA
- Real-world production adoption evidence still limited (announced April 2026)
About
- Platforms
- Available in Python, TypeScript, Rust, Go, and .NET
- Languages
- PythonTypeScriptRustGoand .NET
- API Available
- Yes
- Self-Hosted
- Yes
- Last Updated
- May 1, 2026
Best For
Who it's for
- Organizations deploying autonomous agents in production
- Teams requiring OWASP Agentic AI Top 10 compliance
- Multi-agent systems needing zero-trust identity and trust scoring
- Regulated industries subject to EU AI Act or Colorado AI Act
- Enterprises using LangChain, CrewAI, OpenAI Agents, or Google ADK
What it does well
- Policy enforcement for autonomous agent tool execution
- Securing agent-to-agent communication with cryptographic identity
- Runtime sandboxing with resource limits and execution control
- Compliance mapping for regulated AI agent workloads (EU AI Act, HIPAA, SOC2)
- Reinforcement learning training governance with policy enforcement
Integrations
Frequently Asked Questions
- Is Agent Governance Toolkit free?
- Agent Governance Toolkit offers a free option. Hosting, model usage, or optional services may have separate costs; check the pricing details and official terms.
- Is Agent Governance Toolkit open source?
- Yes. Agent Governance Toolkit is open source — the source repository is at https://github.com/microsoft/agent-governance-toolkit.
- Does Agent Governance Toolkit have an API?
- Yes. Agent Governance Toolkit exposes a developer API. See the official documentation at https://microsoft.com for details.
- Can I self-host Agent Governance Toolkit?
- Yes. Agent Governance Toolkit supports self-hosting on your own infrastructure.
- When was Agent Governance Toolkit released?
- Agent Governance Toolkit was first released in 2026.
- What platforms does Agent Governance Toolkit support?
- Agent Governance Toolkit is available on: Available in Python, TypeScript, Rust, Go, and .NET.
Curated lists that include this category
Microsoft's governance layer for autonomous agents addresses all ten OWASP agentic AI risks with deterministic, sub-millisecond policy enforcement.
This is a policy engine that sits between your AI agent code and execution, enforcing security rules without requiring a rewrite of the agent itself. The problem: autonomous agents in production face ten distinct attack vectors—prompt injection, excessive agency, hallucination-driven actions, and others—that traditional application security doesn't cover. The differentiator is breadth: this toolkit addresses all ten OWASP risks in a single framework, hooks into LangChain and other agent frameworks at their extension points, and ships SDKs for TypeScript and .NET. It's free. The honest catch: it runs application-level governance in the same process as the agent, so production deployments require containerizing each agent separately rather than relying on kernel-level isolation.
*Use this if you're running agents in regulated industries or multi-tenant systems where compliance and containment matter more than simplicity.*
Contribute
- Work on Agent Governance Toolkit? Claim this listing.
- Embed a badge for your README or site.
Sign in to rate this tool or suggest an edit.