Jev agent authorization · Kinde + Jev
Every agent call stops at the gate.
Permissions say what a user can do. They do not say what the user asked for. Jev Gatehouse checks both on every tool call, before it runs.
- 01KindeSigns the user in and passes their token through MCP. The guard reads their organization, permissions and feature flags.
- 02JevReads the call, the request and what the agent read. Returns typed probabilities in about 200 ms.
- 03PolicyCode decides from the numbers. The call runs, waits for a fresh sign-in, or stops.