agentgov-gateway

The local FastAPI gateway that Claude Code (via ANTHROPIC_BASE_URL=http://localhost:8000) talks to.

Runs on each developer's machine. Vaults the upstream credential (X25519 sealed-box decrypted from the signed policy snapshot). Enforces repo-lock + work-item binding + budget middleware chain. Streams SSE verbatim to Claude Code while tee-parsing usage frames for attribution.

Part of the AgentGov project — see github.com/deepakahu/agentGov for the full monorepo (control tower, CLI, client assets, Supabase migrations, docs).

Install

pip install agentgov-gateway

Configure

Requires these env vars — see the project .env.example for the full list:

• CONTROL_TOWER_URL — where your AgentGov control tower is deployed
• GATEWAY_SERVICE_TOKEN — a gtw_... token from agentgov register-device
• POLICY_SIGNING_PUBLIC_KEY_B64 — Ed25519 public key (control tower gives you this)
• DEVICE_KEY_PATH — path to your X25519 device private key (default: ./.runtime/device_key.priv)
• UPSTREAM_MODE — oauth_passthrough (default, personal) or apikey_vault

Run

uvicorn agentgov_gateway.main:app --host 127.0.0.1 --port 8000

Under systemd / launchd for persistent operation.

License

Apache-2.0