Runtime
The protocol-neutral dispatcher that owns the sensitive execution sequence. Adapters translate; they do not authorize or execute independently.
Onterix platform
One runtime.
Every interface.
The durable abstraction is not a protocol. It is a principal requesting a typed enterprise capability under an explicit identity, client, policy, protection, approval, and audit context.
ClaudeChatGPTCodexCLIInternal agents
ONTERIX RUNTIMEOne governed execution path
IdentityData policyApprovalEvidence
Company systemsKnowledgeModelsWorkflows
Product surfaces
A shared trust boundary—not another agent workspace.
Keep the models, clients, workflows, identity providers, DLP systems, and infrastructure you choose. Onterix connects their controls at execution time.
Gateway
MCP first, with a native capability API for CLI and SDK clients. Future interfaces project the same typed registry and results.
Brain
Permission-aware discovery and retrieval with source ACLs, citations, trust, freshness, destination checks, and regulated-safe defaults.
Actions
Governed reads, writes, durable runs, exact-payload approvals, revision rechecks, idempotency, and visible execution states.
One execution sequence
Policy stays underneath the protocol.
Every ingress normalizes into the same capability request and receives the same decision semantics. There is no privileged CLI, hidden workflow bypass, or weaker API path.
01Authenticate actor, subject, agent, and clientidentity
02Resolve immutable capability and source ceilingcapability
03Inspect source, destination, and proposed boundaryprotection
04Evaluate policy, limits, routing, and approvalpolicy
05Transform and seal the authorized requestprepare
06Resolve credentials inside the active data planesecrets
07Execute synchronously or create a durable runexecute
08Inspect output, normalize, redact, or quarantineegress
09Record evidence and return result or run handleevidence
Capability model
Make every enterprise action typed and inspectable.
Tools are not raw API passthroughs. A capability has an owner, immutable version, input and result schema, risk class, source semantics, approval behavior, and conformance evidence.
Show only eligible capabilities
Tool visibility is filtered by tenant, actor, client trust, source, deployment, readiness, and policy.
Load detail only when needed
Agents and CLI users can inspect schemas and risk before bringing a large catalog into context.
Run through the common boundary
Identity, protection, policy, approval, credentials, execution, and evidence remain one transaction.
Use durable runs for real work
Long-running scans, approvals, workflows, and artifacts return visible state instead of fake synchronous success.
STATUS
Onterix is in private-preview development. The repository currently contains a runnable Phase 0 scaffold and fixture capabilities; the full runtime, client compatibility, connectors, Brain, and deployment models described here are the implementation target and will receive readiness labels as they are verified.
Architecture sessions
Bring the agent workflow security cannot approve yet.
We are working with design partners to turn high-value, high-control enterprise actions into concrete runtime contracts and live proofs.