Open Source · MIT Licensed

The Governance Proxy for AI Agents

SDK wrappers are door locks.
Your agent can still find another door.

Govyn is a wall. No API key = no way through.

View on GitHub Quick Start →
$ npx govyn init

Explore Govyn

Integrations, policy templates, and insights for governing AI agents in production.

INTEGRATION
LangChain + OpenAI

Add budget limits, policy enforcement, and full replay to LangChain agents using OpenAI. Five-minute setup, zero code changes.

 INTEGRATION
CrewAI + OpenAI

Add budget controls and policy enforcement to CrewAI multi-agent crews using OpenAI. Govern every agent in your crew independently.

 INTEGRATION
OpenClaw + Anthropic

Govern OpenClaw agents using Claude. Add budget enforcement, model policies, and conversation replay to your OpenClaw workflows.

 FROM OUR BLOG
88% of Enterprises Had an AI Agent Security Incident Last Year. Most Never Saw It Coming.

82% of executives think their AI policies protect them. Only 14.4% of agents go live with full security approval. The gap is where breaches happen.
View all policy templates
SDK Model

Door Lock

Agent🔑 has API keySDK Wrapper✓ checkOpenAI APIendpointbypass!Agent bypasses governance — no enforcement
Proxy Model

Wall

Agent🔒 no API keyGovyn ProxyPolicy ✓🔑 holds keyOpenAI APIendpointno key — blockedNo bypass possible — proxy is the only path

How it works

01

Install & configure

One command to start. Point it at your providers. 

$ npx govyn init

# config.yaml
providers:
  openai:
    api_key_env: OPENAI_API_KEY

agents:
  research-agent:
    budget_daily: 50.00
02

Define policies

YAML rules. Git-versioned. Enforced at the proxy. 

policies:
  - name: "no-database-deletes"
    scope: global
    rule: block
    match:
      content_pattern:
        "DELETE FROM|DROP TABLE"
    message:
      "Blocked by policy"
03

Your agents are governed

Every call logged. Budgets enforced. Policies can't be bypassed.

Before

Agent → API ungoverned

After

Agent → Proxy → API governed ✓

What no one else has

Proxy enforcement

Not an SDK. Your agent never has the real API key. Architecturally unbypassable.

Policy-as-code

YAML policies versioned in git. Not just budget numbers in a dashboard.

Cost control & budgets

Per-agent budgets, loop detection, auto-kill. Cost tracking across all providers.

Smart model routing

Route to cheaper models automatically. Save 60-80% on tokens with zero code changes.

Session replay

Record and replay full agent sessions. Debug what happened at 3am.

5-minute setup

npx govyn init. YAML config. No Kubernetes. No enterprise onboarding.

Cut your AI API bill by 60-80%
without changing agent code

policies.yaml 
- name: smart-model-routing
  type: model_route
  rules:
    # Short prompts → Haiku
    - when:
        input_tokens_estimate: "<500"
      route_to: "claude-haiku-4-5"

    # Medium → Sonnet
    - when:
        input_tokens_estimate: "<4000"
      route_to: "claude-sonnet-4-5"

    # Complex → stays as requested
    - default: passthrough

Cost per million input tokens

Opus $15.00
Sonnet $3.00
Haiku $0.80

Your agent requests Opus → Proxy sends Haiku → You save ~$14/M tokens

70% of agent calls are simple tasks that don't need a premium model.

How Govyn compares

Feature Govyn SDK Wrappers AgentBudget, TealTiger Enterprise Agentgateway
Architecture
HTTP proxy
In-process SDK wrapper
K8s-native proxy
API key location
Proxy only
Agent environment
K8s secrets
Bypass possible?
No
Yes
No
Policy engine
YAML, git-versioned
Built-in rules only
Enterprise config
Cost tracking
Built-in, per-agent
Built-in, basic
Enterprise tools
Setup time
5 minutes (npx)
3 lines of code
Enterprise onboarding

Cloud platform

Everything in the open-source proxy, plus a managed dashboard, team features, and zero ops.

Dashboard

Cost tracking, agent management, policy editor, and approval queue in one interface.

Approval workflows

Human sign-off before sensitive operations. Approve or deny from the dashboard.

Anomaly detection

Automatic cost spike detection, behavioral anomalies, and configurable alert thresholds.

Teams & RBAC

Organization isolation, role-based access, and Clerk-powered authentication.

Explore all features

Pricing

Free / Open Source

$0

Self-hosted, forever

  • Unlimited agents
  • 24-hour log retention
  • Basic policies
  • Community support
View on GitHub
Recommended

Starter

$29/mo

Cloud-hosted proxy

  • 10 agents
  • 7-day log retention
  • Smart model routing
  • Email support
Get Started

Team

$99/mo

For production teams

  • Unlimited agents
  • 30-day log retention
  • Session replay
  • Approval queue & RBAC
  • Priority support
Get Started

Need more? Contact us for Enterprise.

Ready to govern your AI agents?

Sign up and start routing requests through Govyn Cloud in minutes. No credit card required for the free tier.

Get Started Free View Pricing

Enterprise

Need unlimited agents, 90-day retention, SSO, or a custom SLA? Tell us about your use case.