Supports GitHub Copilot as an AI provider, enabling centralized management and observability of Copilot usage.
Syncs with Google Workspace as an enterprise identity provider for role-based access and permission enforcement.
Syncs with Okta as an enterprise identity provider to enforce team, server, and tool permissions through RBAC and OAuth.
Supports OpenAI/ChatGPT as an AI provider, enabling centralized access control, policy enforcement, and observability of OpenAI usage.
This repository is the open source stack behind Speakeasy's AI control plane. Secure and centrally manage MCPs, Skills, and Assistants your whole company to access, with fine-grained permissions, threat detection, and full observability of token use and costs. Every tool call, permission change, and access event logged and searchable. SOC 2 Type II and ISO 27001 certified.
To get started on the hosted platform you can Sign up, or check out the Quickstart guide.
Track AI usage across teams and measure impact with either tokens or cost. Deep dive expensive sessions, create budgets and measure tool effectiveness. Built on a foundation of Opentelemetry. Exportable and interactive via platform MCP and a built in assistant.
Related MCP server: Peta Core
Every prompt, response, and agent action is inspected and enforced in real time. Sensitive data is blocked, redacted, or logged before it leaves your environment. Create and enforce flexible policies to prevent prompt injection, log shadow use and detect PII secrets and other sensitive data types.
A single control layer for connecting your agents to MCPs for your SaaS vendors, APIs, and internal systems, with policy enforcement and granular access control built in. Private networking and tunneling deployed on demand.
Centralise distribution of MCPs, Skills, Plugins and Assistants to your team based on enterprise roles. Team, server, and tool level permissions enforced through RBAC and Oauth2.1. Synced to your enterprise IDP (Okta, Azure AD, Google Workspace, etc.).
Chat with us: Join our slack for support and discussions or email us at support@speakeasy.com.
Contribute feature requests or report issues on our roadmap.
Documentation for the platform is available here.
Run ./zero until it succeeds. This script is what you use to run the dashboard and services for local development. It installs dependencies, runs pending database migrations, and starts everything up.
The main dependencies are Mise and Docker. The ./zero script will guide you to install these if they are not found.
Seed your local organization with a realistic working environment — a deployed API, agent sessions, telemetry, risk findings, teammates, and an API key:
mise seedIt talks to the databases directly, so it can run before the services are up, and re-running it resets the seeded data.
To work on several branches at once, each git worktree can run its own full stack on its own ports:
wt switch --create my-featureSee CONTRIBUTING.md for more detail on local development, auth, worktrees, and the CLI.
Contributions are welcome! Please open an issue or discussion for questions or suggestions before starting significant work.
See CONTRIBUTING.md for development setup and detailed contribution guidelines.
TypeScript — dashboard language.
Golang — backend language.
Goa — design-first API framework.
Temporal — workflow engine.
Polar — usage-based billing.
OpenRouter — LLM gateway.
This server cannot be deployed
MCP gateway with runtime security policy, tool-call-level control, and audit of agent actions.
Identity, authorization, audit trails, and revocable permissions for AI agents accessing MCP tools.
MCP control plane for AI developers managing customer mail, DNS, projects, keys, and diagnostics.
Zero-secret MCP gateway for AI agents: risk-scored, audited calls with human-in-the-loop approval.
