Skip to main content

ACP — AI Control Plane: deterministic governance and execution control for enterprise AI agents.

Project description

ACP — AI Control Plane

Deterministic governance and execution control plane for enterprise AI agents and autonomous systems.

Note: “ACP” means many things in other industries (medical, political, nonprofit, and more). In this project it always means ACP — AI Control Plane, not a generic acronym.

Add governance, approvals, policy enforcement, and execution visibility to AI agents in minutes.

Works with CrewAI, LangGraph, Strands, Google ADK, MCP tools, and custom Python workflows.

Requires: Docker Desktop (Compose v2).


Quick start

pip install acp-ai
acp init          # optional: starter policies in ~/.acp/policies
acp up --build    # first run: build + start stack
acp dashboard     # open governance UI
Step Command
Install pip install acp-ai
Start stack acp up (use acp up --build once)
Open UI acp dashboardhttp://localhost:3090/dashboard/
Stop acp down

Why ACP — AI Control Plane?

Most agents call tools, APIs, and other agents directly. Teams then scatter rules across Python, workflows, and frameworks:

if supplier_risk_score > threshold:
    require_human_approval()

That becomes inconsistent, hard to audit, easy to bypass, and duplicated everywhere.

ACP — AI Control Plane centralizes governance outside agent code:

Capability What you get
Centralized governance One place for rules, not copy-paste per team
Policy enforcement OPA/Rego evaluates every governed call
Approvals Escalate high-risk actions to humans
A2A governance Governed agent-to-agent calls
A2T governance Governed agent-to-tool calls
Audit & visibility Decisions, traces, registry in one dashboard

Architecture

ACP — AI Control Plane architecture

Agent / Workflow  →  ACP SDK  →  Interceptor / Gateway  →  OPA (Rego)  →  Allow / Deny / Escalate  →  Execution

Dashboard

The ACP — AI Control Plane dashboard is a core differentiator: live allow/deny/escalate decisions, approvals, agent registry, and policy catalog. Open http://localhost:3090/dashboard/ after acp up.

Overview & activity

Overview — governance posture and live activity

Live activity — real-time enforcement stream

Decisions & approvals

Governance decisions — allow / deny / escalate analytics

Approvals — human-in-the-loop escalation queue

Registry & policies

Agent registry — identity catalog for policy enforcement

Policies — Rego catalog from the interceptor

Policy detail — mortgage underwriting rules

Forensics

Traces — governance trace investigation


Deployment modes

Mode How Best for
Local acp up via pip + Docker Demos, dev, quickstart
SDK @governed_tool in your agent code CrewAI, LangGraph, Strands, custom Python
Gateway Single origin on :3090 (dashboard + API proxy) Local unified URL; pattern for prod ingress
Cloud / self-hosted Docker Compose, Kubernetes, ECS/EKS on AWS/Azure/GCP Team or enterprise rollout

Local endpoints

URL Purpose
http://localhost:3090/dashboard/ Governance dashboard
http://localhost:8080 Interceptor API (/tool-call, /api/v1/*)

Self-hosted (example)

https://acp.your-company.example

Example: governed tool

import os
from acp import governed_tool

os.environ.setdefault("ACP_INTERCEPTOR_URL", "http://localhost:8080")

@governed_tool(agent_id="supply-chain", tool="supplier_approval")
def supplier_approval(supplier_name: str, risk_score: int):
    return {"supplier": supplier_name, "risk_score": risk_score, "status": "pending_review"}

The AI Control Plane intercepts the call, evaluates policy, then allows, denies, or escalates.


Example: policy (Rego)

package acp.policy

allow {
    input.identity.role == "supply-chain-manager"
    input.action.tool == "supplier_approval"
    input.risk_score < 70
}

Edit policies in ~/.acp/policies/ after acp init.


Example: governance flow

Supply Chain Agent
    → ACP — AI Control Plane validates identity (JWT)
    → OPA evaluates policy
    → Decision: ESCALATE
    → Human approves in dashboard
    → Execution resumes

What the AI Control Plane provides

  • Policy enforcement — OPA/Rego (Cedar on roadmap)
  • Identity — JWT from Okta, Auth0, Keycloak, or your IdP
  • Approvals — human-in-the-loop for risky actions
  • Observability — dashboard for decisions, traces, agents, tools
  • Agent registry — lightweight catalog of agents and capabilities
  • Framework-friendly — keep CrewAI / LangGraph / Strands for reasoning; govern execution here

Philosophy

Orchestration frameworks handle reasoning, planning, and workflows.

ACP — AI Control Plane handles governance, trust, approvals, policy, and auditability.

Reasoning stays autonomous. Execution stays governed.


Roadmap

  • Gateway / proxy execution mode (production hardening)
  • MCP-native governance
  • Policy studio and replay
  • Enterprise topology views
  • Multi-cloud deployment templates

License

MIT License

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

acp_ai-0.2.4.tar.gz (75.9 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

acp_ai-0.2.4-py3-none-any.whl (104.1 kB view details)

Uploaded Python 3

File details

Details for the file acp_ai-0.2.4.tar.gz.

File metadata

  • Download URL: acp_ai-0.2.4.tar.gz
  • Upload date:
  • Size: 75.9 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? No
  • Uploaded via: twine/6.2.0 CPython/3.11.6

File hashes

Hashes for acp_ai-0.2.4.tar.gz
Algorithm Hash digest
SHA256 3248845a4ef8c4626eccbba1cd7488d4905f2e8e1a136da44d1b01d5f7d3d460
MD5 beda8a9b2ff95e3b11c48fd2daf78ffc
BLAKE2b-256 903e656d79330c35210690816f8d8c1cecee1b687fbe7613ef4a9daa38964ff1

See more details on using hashes here.

File details

Details for the file acp_ai-0.2.4-py3-none-any.whl.

File metadata

  • Download URL: acp_ai-0.2.4-py3-none-any.whl
  • Upload date:
  • Size: 104.1 kB
  • Tags: Python 3
  • Uploaded using Trusted Publishing? No
  • Uploaded via: twine/6.2.0 CPython/3.11.6

File hashes

Hashes for acp_ai-0.2.4-py3-none-any.whl
Algorithm Hash digest
SHA256 78e78dd2ab900dae67396617e0a62e5a3e186b7320015ebc66d5da34dcc910a4
MD5 02bb45273eeb1db2774b55f3b020e289
BLAKE2b-256 d0c6ee9439c7d3482cab02ed7ce20be0cf512350e9ca5048891654bbff748d52

See more details on using hashes here.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page