Agentmetry
Free · Open source
SOC and DevSecOps teams
Descles agent control plane
FreemiumAPI
Provider keys living on developer laptops, shared credentials with no ownership, and budgets discovered after the bill arrives — that's the production reality for teams running multiple AI agents before they route through a control plane.
Similar tools
AgentmetryFreeAgentmetry is an open-source, local-only session recorder for AI coding agents — Cursor, Claude…
Comet AIFreemiumOpik connects the full loop: trace every step an agent takes, surface recurring silent errors…
Selfship.aiFreemiumThe observe-diagnose-fix-verify cycle runs on live traffic without you assigning tasks or…
TokenDamFreemiumThe tool runs entirely in the browser — nothing you paste leaves your machine — which means no…
Summary
Descles sits between your existing SDK and your provider, requiring only an endpoint swap and a scoped key. Every request is bound to an identity — organization, group, agent — before it reaches the model, so attribution is structural, not reconstructed from logs after the fact. Budget enforcement and tool-call holds happen in the request path, not as post-hoc alerts. The live surface covers Model I/O for OpenAI and Anthropic traffic; Tool I/O and Resource I/O enforcement require runtime integration with the Action API or MCP adapter, which is a real integration step, not a config toggle. Teams that need enforceable tool-call governance without that runtime integration will find the approval loop is illustrative rather than operational.
Bottom line: Route your OpenAI or Anthropic agents through a single authenticated endpoint and get attribution, budgets, and audit trails with minimal code change — but if you need to hold or deny specific tool calls at runtime, plan for the additional integration work the Action API requires before treating that as production-ready.
Pricing Plans
Last verified 4 days ago- Free Tier
- Run the open-source edge. Start with virtual keys, model and MCP routing, per-agent budgets, policy, approvals and local records. You supply the infrastructure and provider keys.
Standalone
Free
Run the open-source edge. You supply the infrastructure and provider keys.
- Virtual keys
- Model and MCP routing
- Per-agent budgets
- Policy
- Approvals
- Local records
Team
Custom
Design partner pilots. Manage agents across your team with setup help and measurement.
- Team identities
- Delegated access
- Shared policy
- Organization context
- Workflow distillation
- Setup assistance
- Results measurement
View full pricing on descles.com →
Pricing may have changed since last verified. Check the official site for current plans.
Find your fit
Before you choose Descles agent control plane
More options in LLM Observability. Compare pricing, platforms, and features side by side.
Comet AI
Freemium
Developers building GenAI apps and agents
Pros
- Endpoint-swap integration with OpenAI and Anthropic SDKs, so teams already using those providers get identity attribution and budget enforcement without rewriting agent code.
- Scoped agent keys replace shared provider credentials on developer machines, which means a single compromised key does not expose the entire provider account or obscure which agent was responsible for a call.
- In-path budget checks stop overspend before it happens rather than surfacing it in a monthly invoice, so finance conversations happen before the damage, not after.
- Every mediated request generates a signed audit record tied to an identity chain, so post-incident review answers 'which agent called what and who approved it' without reconstructing events from raw logs.
- BYOK credential management keeps provider billing relationships in your account, so switching or renegotiating provider contracts does not require rerouting through a markup layer.
Cons
- Tool-call holds and approvals — the capability most teams want from a control plane — are only enforceable when the agent runtime integrates the Action API or MCP adapter. Teams skipping that integration get an audit trail but not actual intervention, which means the governance story is incomplete until that integration work is done.
- Tool I/O and Resource I/O policy surfaces do not yet have a zero-setup hosted gateway; the vendor places these on the roadmap. Teams that need enforceable tool-level governance without a custom runtime integration switch to a competitor or build their own middleware while waiting.
- No self-hosted deployment option exists. Teams in environments where all traffic must stay on-premises — regulated industries with strict data residency requirements — cannot use Descles at all and must evaluate a different architecture.
About
- API Available
- Yes
- Self-Hosted
- No
- Last Updated
- September 16, 2026
Best For
Who it's for
- Teams running multiple AI agents
- Environments needing tool-call governance
- Usage tracking across providers
- Secure BYOK setups with minimal client changes
What it does well
- Enforce budgets and policies on agent tool use
- Attribute model calls to specific agents or users
- Route existing agents through a single authenticated endpoint
- Audit and review tool calls without code modifications
Integrations
Frequently Asked Questions
- Is Descles agent control plane free?
- Descles agent control plane offers a free option alongside paid upgrades. Check the current allowances and terms before choosing a plan.
- Does Descles agent control plane have an API?
- Yes. Descles agent control plane exposes a developer API. See the official documentation at https://descles.com for details.
Curated lists that include this category
Descles is a cloud-hosted agent control plane that routes AI agent traffic through an identity-aware gateway, giving teams one place to enforce budgets, attribute model calls, and review or approve tool calls before they execute. The core workflow is a two-step onboarding: store your provider key in the Descles console, issue an agent-scoped key, then update the SDK endpoint — the vendor describes this as a one-line config change for OpenAI and Anthropic SDKs. From that point, every request is tagged with an identity chain (organization, group, agent, key) and checked against defined policies before the model call completes.
The distinguishing capability is the approval loop: when policy flags a model-proposed tool call as sensitive — a terminal command targeting a production pod, for example — execution is paused and an approval record is created for a named operator to accept or deny. This is not a logging layer that alerts after the fact; the vendor describes it as a decision made in the request path. The approval, denial, and trace are stored as signed records in an audit trail, so accountability for each exception has a named owner.
The control surface has three tiers of maturity. Model I/O — routing, BYOK credential management, budget enforcement, and usage traces — is live and hosted on AWS. Tool I/O and Resource I/O policy enforcement, which is where the pause-and-approve capability becomes enforceable rather than illustrative, requires the participating agent runtime to integrate the Action API or MCP adapter. The vendor acknowledges a zero-setup hosted gateway for those surfaces is planned but not yet live. Teams expecting full tool-call governance with no runtime changes will hit this boundary.
Descles is compatible with the OpenAI SDK, Anthropic SDK, Claude Code, Hermes, custom agents, and MCP adapters. The BYOK model means provider billing stays in your account — Descles does not sit in the billing path or add model markup. The service is cloud-only with no self-hosted deployment option available.
Contribute
- Work on Descles agent control plane? Claim this listing.
- Embed a badge for your README or site.
Sign in to rate this tool or suggest an edit.