English Français العربية

Vantio Gate

السجل الرسمي الذكاء الاصطناعي والوكلاء

Vantio Gate — Policy Latch dry-run evaluate for agents. No live enforce from MCP.

الشيفرة المصدرية الموقع التوثيق

التثبيت

أضف هذا إلى إعدادات MCP في عميلك (Claude Desktop: claude_desktop_config.json، وCursor: ‏.cursor/mcp.json، ويستخدم VS Code وغيره الصيغة نفسها «mcpServers»).

NPM package @vantio/gate-mcp
Claude Code 
claude mcp add vantio-gate -e 'VANTIO_API_KEY=<your vantio_api_key>' -e 'VANTIO_API_BASE=<VANTIO_API_BASE>' -- npx -y @vantio/gate-mcp@0.1.0
إعداد JSON (Claude Desktop وCursor وVS Code) 
{
    "mcpServers": {
        "vantio-gate": {
            "command": "npx",
            "args": [
                "-y",
                "@vantio/gate-mcp@0.1.0"
            ],
            "env": {
                "VANTIO_API_KEY": "<your vantio_api_key>",
                "VANTIO_API_BASE": "<VANTIO_API_BASE>"
            }
        }
    }
}

متغيرات البيئة

  • VANTIO_API_KEY سري Optional Pro API key for gate_get_policy / gate_residual_risk against your control plane
  • VANTIO_API_BASE Optional Pro API base URL (default https://api.vantio.ai)

التوثيق

مأخوذ من ملف README للمشروع على GitHub ويُحدَّث أسبوعيًا. تفتح الروابط على GitHub.

المحتويات
  1. Vantio
  2. Vantio Optics (Open Core)
  3. Phantom Engine installer
  4. Documentation
  5. License
  6. Security
  7. Contributing

Vantio

Linux security for AI.

This repository contains Vantio Optics, the Phantom Engine installer, and the Python SDK.

Vantio Optics (Open Core)

Free, local-first observability for AI egress. Optics is the free Observe tier. It records the destination, the process, the size, and the timing of a supported outbound call. Does not block actions or retain prompts or completions.

The Optics home is moving to github.com/vantioai/vantio-optics. Publishing still runs from this repository. The editor extension stays at extensions/vantio-optics. Commands and local install notes are in extensions/vantio-optics/README.md.

Install

These are the versions npm and PyPI served on 2026-10-21. Manifests in this git tree can be newer than the registry.

PackageRegistryVersion
@vantio/clinpm0.3.24
@vantio/agent-sdknpm0.2.4
vantio-agent-sdkPyPI3.1.1
@vantio/optics-mcpnpm0.1.2
@vantio/gate-mcpnpm0.1.0

@vantio/gate-mcp is a compatibility package for an older integration.

Optics CLI, on macOS, Linux, and Windows (WSL):

npm install -g @vantio/cli@0.3.24
vantio run node agent.js

vantio run injects the Node interceptor with NODE_OPTIONS --require for node, npx, tsx, and ts-node. On Node it covers fetch, undici, http/https, http2, net/tls, WebSocket, and spawned curl or wget.

Python SDK:

pip install vantio-agent-sdk==3.1.1

Wrap a Python callable with @shield. Prefixing vantio run python does not intercept by itself.

Node SDK:

npm install @vantio/agent-sdk@0.2.4

The Node SDK exposes shield(). Outbound Node coverage comes from vantio run.

Optics MCP:

npm install @vantio/optics-mcp@0.1.2

Free Optics needs no account and no API key.

Browser paths stay outside this wrap.

A process can miss the wrapper when it opens a socket the Node interceptor does not see, starts a subprocess outside vantio run, or uses a runtime other than Node without the Python SDK. Optics records the paths it wrapped.

vantio coverage prints the processes and connections recorded on this system, and which of those paths are on a local allowlist. vantio destinations flags the first time a recorded program connects to a destination that is not on that list. vantio export sends those events as OTLP/HTTP JSON, syslog or JSON lines, or a webhook. Optics does not stop the call.

Telemetry is disabled by default. Set VANTIO_TELEMETRY=1 to opt in. VANTIO_TELEMETRY_DISABLED=1 or DO_NOT_TRACK=1 override that opt-in.

Phantom Engine installer

Phantom Engine is enforcement and control for enrolled Linux systems. Contact Vantio. The product page is vantio.ai/phantom-engine.

The installer source is packages/vantio-install. vantio-install is not on npm or PyPI. Operator install uses the sealed wheel described in packages/vantio-install/docs/QUICKSTART.md. The commands are vantio-install and vantio-verify. That install does not replace @vantio/cli. The installer notes in that package target Ubuntu 24.04 LTS on x86_64.

Documentation

License

@vantio/cli, @vantio/agent-sdk, and vantio-agent-sdk declare MIT. License files for the CLI and the Python SDK are packages/vantio-cli/LICENSE and packages/vantio-agent-sdk-py/LICENSE. The Node SDK declares MIT in packages/vantio-agent-sdk/package.json. There is no root LICENSE file. The MIT grant covers the published packages named here.

Security

Report a suspected vulnerability to security@vantio.ai. The process is SECURITY.md.

Contributing

See CONTRIBUTING.md and CODE_OF_CONDUCT.md.

الأسئلة الشائعة

ما هو Vantio Gate؟

Vantio Gate — Policy Latch dry-run evaluate for agents. No live enforce from MCP.

كيف أثبّت Vantio Gate؟

يعمل على جهازك. في Claude Code: claude mcp add vantio-gate -e 'VANTIO_API_KEY=<your vantio_api_key>' -e 'VANTIO_API_BASE=<VANTIO_API_BASE>' -- npx -y @vantio/gate-mcp@0.1.0. وفي العملاء الآخرين، الصق إعداد JSON من هذه الصفحة في إعدادات MCP الخاصة بهم.

هل يحتاج Vantio Gate إلى مفتاح API؟

نعم. يتطلب VANTIO_API_KEY، وتضبطها في إعداداته.

هل Vantio Gate مفتوح المصدر؟

شيفرته علنية على GitHub، لكن المستودع لا يعلن ترخيصًا قياسيًا.

من يصون Vantio Gate؟

ينشره vantioai. يدرجه AI.tn لكنه لا يصونه ولا يوصي به.

من سجل MCP الرسمي. الإدراج ليس توصية: راجع شيفرة الخادم وصلاحياته قبل منحه الوصول إلى بياناتك.