Skip to main content

Documentation Index

Fetch the complete documentation index at: https://mintlify.com/microsoft/agent-governance-toolkit/llms.txt

Use this file to discover all available pages before exploring further.

The Agent Governance Toolkit ships governance packages in five languages: Python, TypeScript, .NET, Rust, and Go. All five implement the core governance primitives — policy evaluation, agent identity, trust scoring, and audit logging. Python is the primary implementation and includes the full stack; the other language packages cover all foundational primitives needed to build governed agents in their respective ecosystems. As of v4.0.0, 45 Python packages have been consolidated into 5 top-level distributions for a dramatically simpler installation story.
AGT is currently in Public Preview. Production-quality releases are available, but breaking changes may occur before General Availability.

​
Prerequisites

Install the runtime for your target language before installing AGT.
LanguageRequired Version
Python3.10+
Node.js18+ / npm 9+
.NET8+
Go1.25+
Rust1.70+

​
Install by Language

pip install agent-governance-toolkit[full]

​
Python Distributions (v4.0.0 — Consolidated)

As of v4.0.0, 45 packages have been consolidated into 5 top-level distributions. You can install exactly what you need, or use [full] to get everything.
DistributionPyPI PackageWhat’s Included
agent-governance-toolkit-coreagent-governance-toolkit-corePolicy engine, capability model, audit, MCP gateway, zero-trust identity, trust scoring, A2A/MCP/IATP bridges
agent-governance-toolkit-runtimeagent-governance-toolkit-runtimePrivilege rings, saga orchestration, termination control, execution plan validation, command denylist enforcement
agent-governance-toolkit-sreagent-governance-toolkit-sreSLOs, error budgets, chaos engineering, circuit breakers
agent-governance-toolkit-cliagent-governance-toolkit-cliagt CLI, OWASP verification, integrity checks, policy linting
agent-governance-toolkit[full]agent-governance-toolkitMeta-package installing all of the above
Install only the components you need: 
# Core governance only (policy, identity, audit, MCP gateway)
pip install agent-governance-toolkit-core

# Core + execution sandboxing
pip install agent-governance-toolkit-core agent-governance-toolkit-runtime

# Full stack (recommended for production)
pip install agent-governance-toolkit[full]

​
Per-Language Capability Coverage

All five language packages implement the four foundational governance primitives:
CapabilityPythonTypeScript.NETRustGo
Policy Engine✅✅✅✅✅
Identity & Auth✅✅◑✅✅
Trust Scoring✅✅✅✅✅
Audit Logging✅✅✅✅✅
MCP Security✅✅✅✅✅
Execution Rings✅✅✅✅✅
SRE / SLOs✅✅✅✅✅
Kill Switch✅✅✅✅✅
Framework Integrations✅✅✅✅✅
Unified CLI (agt)✅————
Governance Dashboard✅————
Legend: ✅ Implemented · ◑ Partial · — Not yet available
.NET is marked partial for Identity & Auth because it uses native ECDSA P-256 asymmetric signing rather than the Ed25519-based identity material used by the other SDKs. Full Ed25519 support is on the roadmap pending broader .NET runtime availability.

​
Policy Backend Support

All five language packages support YAML rules, OPA/Rego, Cedar, and programmatic policy construction:
BackendPythonTypeScript.NETRustGo
YAML rules✅✅✅✅✅
OPA / Rego✅✅✅✅✅
Cedar✅✅✅✅✅
Programmatic✅✅✅✅✅

​
Optional Azure Configuration

For Azure-integrated features (managed identity, Azure Key Vault for credential storage, Azure Monitor for audit log export), set the following environment variables: 
export AZURE_CLIENT_ID="<your-client-id>"
export AZURE_TENANT_ID="<your-tenant-id>"
export AZURE_CLIENT_SECRET="<your-client-secret>"
These are optional. AGT works fully offline without Azure credentials — local file-based policies and in-process audit logging require no cloud connectivity.

​
Additional Developer Surfaces

AGT ships first-party governance plugins for developer CLI tools built on the TypeScript SDK:
SurfacePackageInstall
Copilot CLI@microsoft/agent-governance-copilot-clinpx @microsoft/agent-governance-copilot-cli install
Claude Code@microsoft/agent-governance-claude-codeclaude --plugin-dir ./agent-governance-claude-code
OpenCode@microsoft/agent-governance-opencodenpm install @microsoft/agent-governance-opencode
For Claude Code, you can also install via the plugin marketplace: 
/plugin marketplace add microsoft/agent-governance-toolkit
/plugin install agt-governance@agent-governance-toolkit

​
Migrating from Legacy Package Names

Previous package names remain installable as stub packages that redirect to the consolidated distributions. No code changes are required — just update your requirements.txt or pyproject.toml when convenient:
Legacy Package NameRedirects To
agent-os-kernelagent-governance-toolkit-core
agentmesh-platformagent-governance-toolkit-core
agentmesh-runtimeagent-governance-toolkit-runtime
agent-sreagent-governance-toolkit-sre
agent-discoveryagent-governance-toolkit-core
agent-hypervisoragent-governance-toolkit-runtime
agentmesh-marketplaceagent-governance-toolkit-core
agentmesh-lightningagent-governance-toolkit-core
Stub packages are provided for migration convenience. They will be removed in a future major version. Update to the consolidated distribution names at your earliest opportunity.

​
Verify Your Installation

After installing, run the CLI health check to confirm everything is wired up correctly: 
agt doctor
Then verify OWASP coverage for your deployment: 
agt verify
See the Quickstart for a full walkthrough of writing your first policy and governing your first tool call.

Build docs developers (and LLMs) love

Get started for freeTalk to us