obot-platform/obot

What it solves

Obot provides a centralized governance and management layer for organizations using AI. It solves the problem of fragmented AI ecosystems where different users use different models, tools, and clients, making it difficult for companies to secure credentials, audit activity, and control which AI tools (specifically Model Context Protocol or MCP servers) are approved for use.

How it works

Obot acts as a proxy and management hub between AI clients (like Cursor or VS Code) and the AI services they use. It consists of several key components:

• Gateways: The MCP Gateway manages access to tools/servers, while the LLM Gateway manages access to model providers (OpenAI, Anthropic, etc.), keeping API keys secure within the platform rather than distributing them to users.
• Sandboxing: It can host MCP servers and agents in isolated Docker or Kubernetes environments to ensure security.
• Registries: It maintains curated catalogs of approved MCP servers and "skills" that users can discover and install via a CLI.
• Obot Sentry: A device-level agent that monitors and audits AI activity happening directly on a user's machine.
• Identity & Audit: It integrates with identity providers to manage permissions and records all activity across the platform for compliance and cost tracking.

Who it’s for

Organizations that deploy AI agents and tools across their workforce and need a way to secure credentials, enforce usage policies, and maintain a full audit trail of AI interactions without forcing everyone onto a single AI client or model.

Highlights

• Provider Agnostic: Works with multiple LLM providers and AI clients simultaneously.
• Centralized Secret Management: Stores provider credentials in theot platform, reducing the risk of leaked keys.
• Governed Tooling: Uses MCP (Model Context Protocol) to distribute and control approved tools and skills.
• Cross-Device Visibility: Correlates activity from both cloud gateways and local device activity via Obot Sentry.
• Sandboxed Execution: Runs hosted agents and servers in isolated containers.