Cadenya
Paid
Developers building agentic workflows
GNT
PaidOpen SourceAPISelf-HostedAgentic
An agent did something expensive, or wrong, or just embarrassing — and nobody could point to which rule should have caught it. GNT is the enforcement layer you put in place before that sentence describes your incident retrospective.
Similar tools
JevProxyFreemiumThe proxy sits in front of your Cursor or Claude Code agent fleet and classifies incoming tool…
CadenyaPaidCadenya is an agent runtime built around a layered model: tools connect once through MCP…
Brain MemoryFreeBrain Memory stores agent decisions as Markdown files with YAML frontmatter, organized in a…
WorldsFreemiumWorlds spins up a sealed twin of the external systems your agent touches — Stripe and Zendesk…
Get This Tool
License: Apache-2.0 Any use incl. commercial
Local-run terms: Users can inspect, self-host, and extend the Apache-2.0 enforcement path in their own environment.
Summary
GNT sits at the action boundary between your agent runtime and the outside world. Before a tool call executes, check_action evaluates it against your org's approved rules and returns one of three verdicts: allowed, blocked, or needs_human — along with the exact rule that decided it. Rules originate as auto-drafted PRs from a repo scan, get merged by a human on GitHub, and are re-examined nightly for staleness or contradiction. The audit trail is the point: every decision maps to an approved rule and a timestamp. The ceiling appears in regulated environments, where SOC 2 attestation is not yet issued — teams with hard compliance deadlines on that specific requirement will need to track that gap.
Bottom line: GNT earns its place when you need Git-backed, auditable agent governance with fail-closed enforcement — but if your compliance program requires an active SOC 2 attestation today, that paper doesn't exist yet.
Find your fit
Before you choose GNT
More options in Agent Frameworks. Compare pricing, platforms, and features side by side.
Brain Memory
Free · Open source
Long-term continuity in multi-session coding projects
Pros
- Git-based rule approval — every guardrail is a merged PR, so there is a named reviewer, a timestamp, and a diff for every policy change, which means you can answer 'who approved this rule and when' without digging through chat logs.
- check_action returns allowed, blocked, or needs_human with the exact governing rule attached, so when an incident happens the audit record already names the rule that should have fired — you are not reconstructing intent after the fact.
- Nightly staleness detection opens its own PRs for rules that have drifted, gone missing, or started contradicting each other, which means your guardrails don't silently rot between quarters.
- Fail-closed enforcement at the action boundary means an action that does not clear the check does not execute — without this, an agent that restates a prompt rule can still break it, as documented by the vendor.
- Apache-2.0 source with a self-host path, so teams in air-gapped or data-sensitive environments can run the enforcement core without passing action data through a vendor service.
Cons
- SOC 2 attestation is in preparation but no auditor has issued it yet — procurement in healthcare, finance, or government that requires an active SOC 2 report as a vendor onboarding condition is blocked until that examination completes, and there is no published timeline.
- Hosted connectors pass source data through GNT's service rather than filtering it locally — teams with strict data residency requirements or legal holds on source content need to scope that data flow explicitly during rollout, adding a pre-deployment negotiation step that self-hosted teams avoid.
- The enforcement model assumes your rules are expressible in plain English and map cleanly to discrete tool calls — agent workflows that involve ambiguous multi-step actions or deeply stateful context will produce needs_human verdicts at high frequency, and teams with low human-review bandwidth will find the queue overwhelming, which pushes them toward frameworks that allow probabilistic risk scoring rather than binary verdicts.
About
- Platforms
- CLI, API, GitHub
- API Available
- Yes
- Self-Hosted
- Yes
- Last Updated
- August 14, 2026
Best For
Who it's for
- Teams using Codex, Claude Code, Gemini CLI or MCP runtimes
- Organizations needing Git-based rule review and approval
- Developers wanting inspectable, self-hostable agent governance
- Regulated environments requiring action evidence and traceability
What it does well
- Enforcing company policies on agent tool calls
- Generating auditable records of agent actions and rule decisions
- Maintaining up-to-date guardrails across repos and connected systems
- Providing needs_human escalation for uncovered actions
Integrations
Frequently Asked Questions
- Is GNT free?
- GNT is a paid tool. No permanent free tier is offered.
- Is GNT open source?
- Yes. GNT is open source.
- Does GNT have an API?
- Yes. GNT exposes a developer API. See the official documentation at https://gntai.dev for details.
- Can I self-host GNT?
- Yes. GNT supports self-hosting on your own infrastructure.
- What platforms does GNT support?
- GNT is available on: CLI, API, GitHub.
Curated lists that include this category
When an agent action slips past policy
An agent did something expensive, or wrong, or just embarrassing — and nobody could point to which rule should have caught it. GNT places an enforcement layer at the action boundary. Before any tool call runs, check_action compares it to the organization’s approved rules and returns allowed, blocked, or needs_human along with the exact rule that decided it.
How rules are created and maintained
Rules start as auto-drafted pull requests from a repository scan. A human merges them on GitHub. Every night the system re-examines the set for staleness or contradictions and opens fresh PRs when needed. The audit trail records each decision against its governing rule and timestamp.
Where it fits
The vendor states the approach suits teams running Codex, Claude Code, Gemini CLI or MCP runtimes that already use Git-based review. It also supports organizations that need inspectable, self-hostable governance and regulated environments that require action evidence and traceability. Platforms include CLI, API, and GitHub. Integrations reach Airtable, Datadog, Figma, GitHub, GitLab, Granola, Hermes, HubSpot, Jira, Linear, Monday, Notion, OpenClaw, Sentry, Slack, and Zoom. Both API access and a self-hosted option are available.
Limitations to weigh
SOC 2 attestation is still in preparation, so procurement that requires an active report is blocked for now. Hosted connectors route source data through GNT’s service rather than keeping it local.
Who it is for / who should skip it
Teams that want Git-based rule approval with named reviewers, timestamps, and diffs, plus nightly staleness checks, will find the model useful. Organizations that must present a completed SOC 2 report or enforce strict data-residency rules without extra negotiation should skip it until those gaps close.
Contribute
- Work on GNT? Claim this listing.
- Embed a badge for your README or site.
Sign in to rate this tool or suggest an edit.