AI automation for every project. Governed by your MCP gateway.

Vordix is a self-hosted governance gateway that sits between your people, your AI agents, and the tools they use, including Jira, GitHub, Slack, Databricks and more. Every request is authenticated, scoped to approved operations, rate-limited, and written to an immutable audit log before it ever reaches a tool.

Vordix runs as a reverse proxy in front of your tools, reachable over both the Model Context Protocol and a plain REST API. When an agent calls a tool, Vordix verifies the identity behind the key, checks it is allowed that exact operation on that exact resource, applies your data-policy rules to the response, logs the full interaction, and only then returns the result.

A raw API key usually carries the full permissions of the human who created it: whole-account access, with no way to say “this project, these operations, not that field.” Vordix issues a key per identity, scoped to exactly the tools, operations and data each agent needs, so a leaked or misbehaving agent can never reach beyond its mandate.

Yes. Vordix speaks the Model Context Protocol, so any MCP client (Claude, Claude Code, Cursor, VS Code or an internal chat tool) connects to one governed endpoint instead of a dozen raw servers. The same controls apply to a REST API for clients that don’t speak MCP.

It centralizes authentication, authorization and audit in one place. Access is default-deny and least-privilege: tool- and operation-level scoping limits blast radius, field-level data policies mask or redact sensitive values, rate limits and lockouts contain abuse, and every security-relevant action lands in a tamper-evident audit trail your auditors can read.

Vordix is self-hosted: it runs entirely on your own infrastructure via Docker Compose. Credentials, traffic and audit logs never leave your network, and integration secrets are never handed back to a client. You stay compliant without trusting a third-party SaaS with access to your tools.

As soon as more than a handful of people or agents touch your tools, or the first time compliance asks “who did what, and could they have done more?” Vordix is built for production-scale AI: per-identity keys, centralized access control and audit-ready logging from day one.