Skip to content

Intended Gateway

One config line.
Every agent governed.

Change ANTHROPIC_BASE_URL on the box where your agents run. Every tool call gets evaluated against your Intended policies. Approve, deny, or escalate to a human in real time. No SDK paste. No code in your agents. Removable in one config flip.

That's it

ANTHROPIC_BASE_URL=https://gateway.intended.so/v1/anthropic
# or
OPENAI_BASE_URL=https://gateway.intended.so/v1/openai
# or for NVIDIA-hosted physical-AI agents:
OPENAI_BASE_URL=https://gateway.intended.so/v1/nvidia-nim
Get a tenant keySource on GitHub →Compare vs Cloudflare AI Gateway / Lakera / Portkey →

The integration shape every successful product in this category uses

Cloudflare AI Gateway, Lakera Guard, Prompt Security, Portkey — all base-URL swaps. We chose the same pattern for the same reason: it's the only one enterprises actually trust.

Customer keeps the model key

We forward Authorization upstream untouched. Never stored. Never logged. The only credential the gateway holds is your Intended tenant key, which identifies you to our policy engine.

Removable in one line

Revert the env var, restart the agent. We're gone. No SDK abandoned in your codebase, no rip-out project, no handoff between teams when the integration owner leaves.

Audit-only first

Run the gateway in observe mode. Every tool call is evaluated and logged, but the response forwards unchanged. Review what we would have blocked, then flip enforce from app.intended.so/gateway when ready.

Provider coverage

Five providers shipped, more on the roadmap. Adding a provider is one file in the adapter directory — the architecture is built to absorb new APIs without rewrites.

Anthropic / Claude

gateway.intended.so/v1/anthropic

OpenAI

gateway.intended.so/v1/openai

NVIDIA NIM

gateway.intended.so/v1/nvidia-nim

AWS Bedrock (Claude)

gateway.intended.so/v1/bedrock-anthropic

Google Vertex (Gemini)

gateway.intended.so/v1/vertex-gemini

Runtimes that work today

Anything that talks HTTPS to a model provider. The base-URL swap is generic by design.

  • OpenClaw
  • NeoClaw (NVIDIA)
  • Claude Code
  • Codex CLI
  • OpenAI Agents SDK
  • LangChain / LangGraph
  • PydanticAI
  • NVIDIA Isaac Sim
  • ROS2 robotics agents
  • Custom (raw HTTP)

Try it in observe mode now. Decide on enforce after you've seen what it would block.

Get a tenant keyTalk to founders →
Intended Gateway — One config line, every agent governed | Intended