AgentIndex icon
AgentIndex
ToolsMCP ServersHOTCategoriesTrendingNewBest ListsCompareGuides
Submit Tool
ToolsMCP ServersHOTCategoriesTrendingNewBest ListsCompare
Home/
Security & Safety/
assay
assay logo

assay

Active·★ 13·MIT·Updated 2026-10-22

Assay provides an open, recomputable evidence profile for privileged AI agent tool actions, enforcing policies deterministically and fail-closed. It records decisions, observations, and unproven claims into tamper-evident bundles for offline verification and security auditing.

#AI Agent Security#Tool Call Enforcement#Evidence Auditing#CI/CD Integration#Deterministic Policy#Security Observability#Tamper-Evident
© 2026 AgentIndex.app|Built by a 10-year iOS Developer.
Best by use caseAboutContactAdvertisePrivacy PolicyTerms of UseQYSGitHubBuy me a coffee ☕

Browse by Category

MCP ServersCode AssistantWorkflow AutomationRAG / Knowledge BaseMulti-AgentBrowser AutomationLLM InfraDev ToolingObservability

Not affiliated with Anthropic, OpenAI or Microsoft.

Guides
$ Install
$ curl -fsSL https://getassay.dev/install.sh | sh
↗ Visit site★ GitHub
01

Features

01Deterministic, fail-closed policy enforcement for tool calls, including optional kernel-level enforcement on Linux.
02Generates offline-verifiable, tamper-evident evidence bundles for audit and replay, integrated with CI without a hosted backend.
03Classifies claims by their trust basis (verified, self_reported, inferred, absent) to ensure honesty and prevent claims from exceeding observed facts.
04Policy gate (`assay mcp wrap`) for pre-execution allow/deny decisions on privileged tool calls, with clear reasons.
05Integrates with CI/CD pipelines via GitHub Actions and SARIF, enabling policy gates on pull requests and security-tab integration.
02

Compatibility

Python
Runtime
Verified via docs
Linux
OS
Verified via docs
macOS
OS
Verified via docs
Windows
OS
Verified via docs
Rust
Build Env
Verified via docs
03

Quick start

1
$ curl -fsSL https://getassay.dev/install.sh | sh
04

Use cases

↳Generating small, reviewable CI artifacts for bounded auditability from existing evaluation outputs, runtime decisions, or MCP tool-call tests.
↳Processing Promptfoo JSONL output from CI evaluations to produce evidence receipts and verified bundles.
↳Auditing and enforcing policies on MCP (Multi-Modal Command Protocol) tool calls, providing an allow/deny audit trail and observed-behavior evidence.
↳Implementing GitHub PR gates based on Trust Basis diffs and policy status, with SARIF/JUnit-ready output.
↳Generating inventory receipts and verified bundles from CycloneDX ML-BOM model components for model inventory and provenance.
05

Alternatives

⚡Top VS:
VSAgentHound★452→VSguardana★251→VSphantom-secrets★18→VS

Comments

Log in to leave a comment

No comments yet. Be the first!

On this page
01Features02Compatibility03Quick start04Use cases05Alternatives
centian
★15
→
AgentHound logo
AgentHound★ 452
Offensive security framework for AI agent infrastructure - recon, credential looting, model exfiltration, poisoning, and attack-path analysis across MCP, A2A, gateways, and AI services. BloodHound for the agentic stack.
VSCompare→
guardana logo
guardana★ 251
Open-source AI security verification for model artifacts, live endpoints, MCP servers, and recorded agent traces. Reproducible evidence for release decisions.
VSCompare→
phantom-secrets logo
phantom-secrets★ 18
Stop AI coding agents from leaking your API keys. Local proxy + MCP that swaps real secrets for phm_ tokens — works with Claude Code, Cursor, Windsurf, and Codex.
VSCompare→
centian logo
centian★ 15
Give your AI agents structure, guardrails, and full observability — the Agent control plane built on MCP.
VSCompare→
shellgate logo
shellgate★ 15
Self hosted secure gateway for AI agents. One token. Full control. Complete audit trail.
VSCompare→
heddle logo
heddle★ 14
Heddle — The policy-and-trust layer for MCP tool servers. Turn YAML configs into validated, policy-enforced MCP tools.
VSCompare→
ADR logo
ADR★ 2.1k
ADR (Agentic Detection and Response): open-source telemetry sensor and dual-agent detection framework for securing MCP-based AI agents.
VSCompare→
helm-ai-kernel logo
helm-ai-kernel★ 60
Fail-closed execution firewall for AI agents: quarantine MCP tools, proxy OpenAI-compatible requests, emit signed receipts, and verify EvidencePacks offline.
VSCompare→
See all alternatives →
Rul1an /
assay
↗

Open evidence profile for MCP tool actions. Enforce configured tool-call policies and record decisions and observations in offline-verifiable bundles. Optional Linux kernel controls. No hosted backend required.

13MIT
Last commit1d ago
StatusActive
CategorySecurity & Safety
Links
Documentation↗Discussion↗Issues↗Releases↗
Cloud Infrastructure
Ad

Deploy on DigitalOcean

Host your MCP servers, Docker containers, and AI agents with $200 free credit over 60 days.

Claim $200 Free Credit