{
  "$schema_doc": "https://gtmstacker.com/registry/schema/entry.schema.json",
  "stability": "emerging",
  "generator": "agentic-media-registry",
  "generated_at": "2026-09-19T19:09:41Z",
  "id": "com.gtmstacker.registry/tool/agent-governance-toolkit",
  "type": "tool",
  "slug": "agent-governance-toolkit",
  "canonical_url": "https://gtmstacker.com/registry/tool/agent-governance-toolkit/",
  "title": "Agent Governance Toolkit",
  "description": "MIT public-preview governance stack from Microsoft for putting deterministic controls around autonomous agents. It intercepts tool calls, messages and delegations before execution, evaluates YAML, OPA or Cedar policies, assigns agent identity, records audit decisions, and adds sandboxing, kill switches and MCP security. The Python stack installs locally, with SDKs or adapters for TypeScript, .NET, Rust, Go, OpenAI Agents SDK, LangGraph, CrewAI, AutoGen, Semantic Kernel and other runtimes.",
  "category": "mcp-agents",
  "tags": [
    "mcp-agents",
    "agent-security",
    "governance",
    "policy-engine",
    "self-hostable"
  ],
  "status": "active",
  "revision": 1,
  "content_hash": "7708f13b69a03019ffd5c1832c134c812392f4b1f7c3bd6f2406a4f9f23e2129",
  "date_published": "2026-09-19T00:00:00Z",
  "date_modified": "2026-09-19T00:00:00Z",
  "source": {
    "name": "github · microsoft/agent-governance-toolkit",
    "url": "https://github.com/microsoft/agent-governance-toolkit"
  },
  "license": "MIT",
  "one_liner": "Microsoft's Agent Governance Toolkit intercepts agent actions before execution and applies policy, identity, audit and sandbox controls in application code.",
  "open_source": "yes",
  "self_hostable": "yes",
  "pricing_model": "free",
  "who_its_for": "Teams moving agents from experiments into workflows that touch customer data, production tools or regulated systems and need enforceable policy plus an audit trail outside the prompt.",
  "aliases": [
    "Agent Governance Toolkit",
    "AGT"
  ],
  "alternatives": [
    "agentdesktop",
    "talos",
    "bumblebee",
    "geiger"
  ],
  "secondary_categories": [
    "ai-infrastructure",
    "workflow-automation"
  ],
  "last_verified": "2026-09-19",
  "evidence": {
    "claim_type": "mixed",
    "source_id": "https://github.com/microsoft/agent-governance-toolkit",
    "note": "MIT, Microsoft ownership, local Python installation, language packages, framework adapters, public-preview status and the policy/identity/audit/sandbox architecture were confirmed from the repo on 2026-09-19. The repo had ~6.3k stars, release v4.1.0 and a same-day push. Coverage and conformance counts are project claims, not an external certification."
  },
  "caveats": "This is a broad public-preview stack and can break before GA. The README's OWASP, NIST, EU AI Act and SOC 2 mappings describe project coverage, not proof that your deployment is compliant. Most teams should start with policy enforcement and audit logging, then add identity, sandboxing and SRE pieces only when the threat model requires them.",
  "lead": "MIT public-preview governance stack from Microsoft for putting deterministic controls around autonomous agents. Every tool call, message and delegation can pass through application-level policy before it reaches the wire, with identity and an audit decision attached. The full stack adds execution sandboxing, kill switches, SRE controls and an MCP security…",
  "chunks": [
    {
      "index": 0,
      "heading_path": [],
      "est_tokens": 111,
      "text": "MIT public-preview governance stack from Microsoft for putting deterministic controls around autonomous agents. Every tool call, message and delegation can pass through application-level policy before it reaches the wire, with identity and an audit decision attached. The full stack adds execution sandboxing, kill switches, SRE controls and an MCP security gateway, while the smallest useful setup is a local policy file plus audit logging."
    },
    {
      "index": 1,
      "heading_path": [
        null,
        "Provenance"
      ],
      "est_tokens": 221,
      "text": "tool call, message and delegation can pass through application-level policy before it reaches the wire, with identity and an audit decision attached. The full stack adds execution sandboxing, kill switches, SRE controls and an MCP security gateway, while the smallest useful setup is a local policy file plus audit logging.\n\n- MIT license, Microsoft ownership, local Python installation, language packages, framework adapters, public-preview status and the policy/identity/audit/sandbox architecture independently verified from the repo on 2026-09-19 (github.com/microsoft/agent-governance-toolkit, ~6.3k stars, v4.1.0, pushed 2026-09-19).\n- Surfaced in the 2026-09-19 viral-X pull through a post linking the official repository.\n- The project's compliance mappings and conformance counts are maker claims. They are useful documentation, not an external certification of a deployment."
    },
    {
      "index": 2,
      "heading_path": [
        null,
        "Why it matters for a GTM stack"
      ],
      "est_tokens": 256,
      "text": "architecture independently verified from the repo on 2026-09-19 (github.com/microsoft/agent-governance-toolkit, ~6.3k stars, v4.1.0, pushed 2026-09-19). - Surfaced in the 2026-09-19 viral-X pull through a post linking the official repository. - The project's compliance mappings and conformance counts are maker claims. They are useful documentation, not an external certification of a deployment.\n\nAn agent that can read the CRM and send email needs a control layer that can deny a destructive call even when the model insists it is correct. This toolkit moves that decision out of the prompt and into code, then leaves a record of what policy allowed or blocked it. For a lean GTM team, the practical starting point is smaller than the repo's full architecture: gate the few high-risk tools, log every decision, and add identity or sandboxing when multiple agents and users start sharing the same credentials. Public preview and breadth are the tradeoffs; adopt the piece your threat model needs, not the whole diagram."
    }
  ],
  "alternates": {
    "markdown": "https://gtmstacker.com/registry/tool/agent-governance-toolkit/index.md",
    "html": "https://gtmstacker.com/registry/tool/agent-governance-toolkit/",
    "json": "https://gtmstacker.com/registry/tool/agent-governance-toolkit/index.json",
    "server_json": "https://gtmstacker.com/registry/tool/agent-governance-toolkit/server.json"
  },
  "jsonld": {
    "@context": "https://schema.org",
    "@graph": [
      {
        "@type": "WebSite",
        "@id": "https://gtmstacker.com/#website",
        "url": "https://gtmstacker.com/",
        "name": "GTM Stacker Agent Registry",
        "description": "A daily-updated, agent-native registry of open-source tool discoveries, tool updates, and curated news for the go-to-market / RevOps engineering niche. Machine-readable first: agents can discover, parse, page, and delta-sync it without scraping HTML.",
        "inLanguage": "en",
        "publisher": {
          "@id": "https://gtmstacker.com/#organization"
        }
      },
      {
        "@type": "Organization",
        "@id": "https://gtmstacker.com/#organization",
        "name": "GTM Stacker",
        "url": "https://gtmstacker.com",
        "description": "The growth-systems practice of Theo Popov: AI-native enrichment, outbound, content engines and internal tooling for startups and venture programs. Its agent-native media property, the GTM Stacker Agent Registry, maintains a daily-updated catalog of open-source go-to-market and RevOps tools that both people and AI engines can discover, compare, and cite.",
        "foundingDate": "2024-08",
        "knowsAbout": [
          "go-to-market engineering",
          "RevOps",
          "sales automation",
          "marketing operations",
          "open-source software",
          "AI agents"
        ],
        "founder": {
          "@type": "Person",
          "@id": "https://gtmstacker.com/#founder",
          "name": "Theo Popov",
          "jobTitle": "Growth Operations & GTM Systems",
          "url": "https://gtmstacker.com/about/",
          "sameAs": [
            "https://www.linkedin.com/in/theo-popov",
            "https://x.com/Theo_Popov",
            "https://github.com/theopopov"
          ],
          "worksFor": {
            "@id": "https://gtmstacker.com/#organization"
          }
        },
        "sameAs": [
          "https://www.linkedin.com/company/gtmstacker",
          "https://www.youtube.com/@gtmstacker",
          "https://www.instagram.com/gtmstacker/",
          "https://www.tiktok.com/@gtmstacker"
        ],
        "mainEntityOfPage": "https://gtmstacker.com/registry/about/"
      },
      {
        "@type": "SoftwareApplication",
        "@id": "https://gtmstacker.com/registry/tool/agent-governance-toolkit/#software",
        "name": "Agent Governance Toolkit",
        "identifier": "io.github.microsoft/agent-governance-toolkit",
        "description": "MIT public-preview governance stack from Microsoft for putting deterministic controls around autonomous agents. It intercepts tool calls, messages and delegations before execution, evaluates YAML, OPA or Cedar policies, assigns agent identity, records audit decisions, and adds sandboxing, kill switches and MCP security. The Python stack installs locally, with SDKs or adapters for TypeScript, .NET, Rust, Go, OpenAI Agents SDK, LangGraph, CrewAI, AutoGen, Semantic Kernel and other runtimes.",
        "applicationCategory": "DeveloperApplication",
        "url": "https://gtmstacker.com/registry/tool/agent-governance-toolkit/",
        "datePublished": "2026-09-19T00:00:00Z",
        "dateModified": "2026-09-19T00:00:00Z",
        "isPartOf": {
          "@id": "https://gtmstacker.com/#website"
        },
        "license": "https://spdx.org/licenses/MIT.html",
        "codeRepository": "https://github.com/microsoft/agent-governance-toolkit",
        "keywords": "mcp-agents, ai-infrastructure, workflow-automation, agent-security, governance, policy-engine, self-hostable",
        "author": {
          "@type": "Organization",
          "name": "microsoft",
          "url": "https://github.com/microsoft",
          "sameAs": [
            "https://github.com/microsoft/agent-governance-toolkit"
          ]
        },
        "offers": {
          "@type": "Offer",
          "price": 0,
          "priceCurrency": "USD"
        },
        "isSimilarTo": [
          {
            "@type": "SoftwareApplication",
            "name": "agentdesktop",
            "url": "https://gtmstacker.com/registry/tool/agentdesktop/",
            "applicationCategory": "DeveloperApplication",
            "offers": {
              "@type": "Offer",
              "price": 0,
              "priceCurrency": "USD"
            }
          },
          {
            "@type": "SoftwareApplication",
            "name": "Talos",
            "url": "https://gtmstacker.com/registry/tool/talos/",
            "applicationCategory": "DeveloperApplication",
            "offers": {
              "@type": "Offer",
              "price": 0,
              "priceCurrency": "USD"
            }
          },
          {
            "@type": "SoftwareApplication",
            "name": "Bumblebee",
            "url": "https://gtmstacker.com/registry/tool/bumblebee/",
            "applicationCategory": "DeveloperApplication",
            "offers": {
              "@type": "Offer",
              "price": 0,
              "priceCurrency": "USD"
            }
          },
          {
            "@type": "SoftwareApplication",
            "name": "Geiger",
            "url": "https://gtmstacker.com/registry/tool/geiger/",
            "applicationCategory": "DeveloperApplication",
            "offers": {
              "@type": "Offer",
              "price": 0,
              "priceCurrency": "USD"
            }
          }
        ]
      },
      {
        "@type": "BreadcrumbList",
        "@id": "https://gtmstacker.com/registry/tool/agent-governance-toolkit/#breadcrumb",
        "itemListElement": [
          {
            "@type": "ListItem",
            "position": 1,
            "name": "GTM Stacker Registry",
            "item": "https://gtmstacker.com/registry/"
          },
          {
            "@type": "ListItem",
            "position": 2,
            "name": "MCP Agents",
            "item": "https://gtmstacker.com/registry/category/mcp-agents/"
          },
          {
            "@type": "ListItem",
            "position": 3,
            "name": "Agent Governance Toolkit",
            "item": "https://gtmstacker.com/registry/tool/agent-governance-toolkit/"
          }
        ]
      }
    ]
  },
  "tool": {
    "name": "io.github.microsoft/agent-governance-toolkit",
    "repository": {
      "url": "https://github.com/microsoft/agent-governance-toolkit",
      "source": "github"
    }
  }
}