Sign in

Jev agent authorization · Kinde + Jev

Every agent call stops at the gate.

Permissions say what a user can do. They do not say what the user asked for. Jev Gatehouse checks both on every tool call, before it runs.

  1. 01KindeSigns the user in and passes their token through MCP. The guard reads their organization, permissions and feature flags.
  2. 02JevReads the call, the request and what the agent read. Returns typed probabilities in about 200 ms.
  3. 03PolicyCode decides from the numbers. The call runs, waits for a fresh sign-in, or stops.

The ledger.

Every decision, before the call runs