Gatehouse documentation
Connect AI agents to your company's tools through one governed door. Start with the quickstart, or jump to a topic.
Get started
IntroductionWhat Gatehouse is, the problem it solves, and how the pieces fit together.QuickstartRun Gatehouse, add an MCP server, write a policy and connect Claude Code in about five minutes.Core conceptsServers, tools, policies, approvals, access requests and the audit log, and how a call moves through them.Connect an agentPoint Claude Code, Cursor, VS Code, Codex or a CI job at Gatehouse.
Using Gatehouse
Servers and toolsAdd MCP servers, give them credentials, decide who can find them, and review their tools.PoliciesAllow, require approval or deny tool calls by tool, group, person and argument values.ApprovalsHold risky calls for a person to approve, in the console or in Slack.Access requests from chatLet people ask for tools they don't have yet, right from their agent.Audit logEvery call, decision and admin change, in a tamper-evident log you can verify and export.
Administration
People and rolesInvite people, assign roles and groups, reset access and lock accounts.GroupsPut people in groups, give groups access with policies, and let groups approve risky calls.Security settingsPassword rules, sign-in modes, sessions and the network allow-list.Audit streamingSend every audit entry, as it's written, to a signed webhook or Splunk.
Enterprise identity
Single sign-onSign in with Google, GitHub, any OpenID Connect provider, or SAML 2.0.Two-step verificationProtect accounts with an authenticator app and recovery codes, and require it for your organization.SCIM provisioningCreate, update and deactivate people and groups automatically from Okta, Entra ID, OneLogin or JumpCloud.Active Directory and LDAPSync groups and accounts from on-premises Active Directory or any LDAP directory, and optionally sign in with directory passwords.
Deploy and operate
Self-hostingRun Gatehouse in your own network with Docker or Kubernetes, manage the master key, and take backups.Deploy on AWS LightsailRun Gatehouse on one Amazon Lightsail server with HTTPS, daily snapshots and encrypted off-site backups.Backups and restoreEncrypted scheduled backups to disk and S3, and how to restore one.LicensingEditions, license keys for self-hosted installs, and what happens when a license runs out.
Reference
ConfigurationEvery environment variable Gatehouse reads.REST APIAutomate approvals, access requests, tools, policies and audit exports.CLICommands for first-time setup, people, tokens, policies, audit checks and backups.Security modelHow Gatehouse protects tokens, credentials, the audit log and the console, and what it assumes.FAQ and troubleshootingAnswers to common questions and fixes for common problems.