AI Toolkit

Authorization for AI‑native developers.

Install the Vengtoo toolkit in your AI coding agent. Run /vengtoo and your project gets a working authorization layer — SDK installed, middleware wired, policies scaffolded. No context switching, no boilerplate.

Read the docs →Get Started

One command to integrate.

Install the toolkit in Claude Code, GitHub Copilot, or any MCP-compatible agent. Run /vengtoo and it reads your codebase, installs the right SDK for your language, wires middleware into your existing routes, and creates a starter policy file.

Works with Express, Gin, FastAPI and most other popular frameworks. If yours isn't auto-detected, the toolkit prompts you and adapts.

Claude Code / Copilot

# Install the toolkit once
/plugin marketplace add https://github.com/vengtoo/vengtoo-toolkit
/plugin install vengtoo@vengtoo-toolkit

# In any project
/vengtoo

✔  Detected: Node.js / Express
✔  Installing @vengtoo/sdk...
✔  Wiring authorization middleware...
✔  Writing vengtoo.yaml...
✔  Ready

  Add this to protect a route:
  app.use(vengtoo.middleware('document', 'read', getSubject))

Everything in the toolkit

Nine skills covering setup, policies, agents, migration, debugging, MCP, and Terraform.

Command	What it does
/vengtoo	Full setup. Installs SDK, wires authorization middleware, scaffolds policy file. Run this first.
/vengtoo-policies	Reviews your existing policies for gaps, redundancies, or missing actions based on your routes.
/vengtoo-abac	Scaffolds an attribute-based access control policy using your entity attributes.
/vengtoo-agent	Adds the Vengtoo Agent to your Docker Compose or Kubernetes config and points your SDK at it.
/vengtoo-ai-agents	Advanced agent patterns: delegation chains, human-in-the-loop escalation, JIT time-boxed grants, and multi-agent trust boundaries.
/vengtoo-mcp	Wires the Vengtoo MCP server into your agent configuration for tool-level gating.
/vengtoo-migrate	Migrates an existing authz system (OPA/Rego, Cedar, Casbin, homegrown RBAC) onto Vengtoo — discover, translate, shadow-test, cut over.
/vengtoo-debug	Diagnoses why an authorization check returned an unexpected allow or deny, and fixes the root cause.
/vengtoo-terraform	Manages your authorization model as Terraform — resource types, resources, roles, policies, assignments — and imports existing resources.

MCP

Gate what your AI agents can do.

The Vengtoo MCP server exposes an authorization tool that any MCP-compatible agent can call before taking an action. Run /vengtoo-mcp to wire it automatically, or add it manually to your MCP config.

Every tool call the agent makes is subject to your Vengtoo policies. Deny a tool, and the agent can't use it — even if it tries.

mcp.json

{
  "mcpServers": {
    "vengtoo": {
      "command": "vengtoo-mcp",
      "env": {
        "VENGTOO_API_KEY": "${VENGTOO_API_KEY}",
        "VENGTOO_APP_ID":  "${VENGTOO_APP_ID}"
      }
    }
  }
}