Obot 是一个开源平台，供组织管理、安全和治理其 AI 生态系统。它提供共享基础设施，用于连接 AI 客户端与模型和工具，分发批准的 MCP 服务器和技能，管理代理访问和凭证，运行托管 AI 工作负载，以及记录托管服务和用户设备的活动。

Obot 不要求组织统一的 AI 客户端、模型提供商或工具生态系统。桌面代理和工具如 Claude Code、Codex、Cursor、VS Code 以及其他 IDE 和 CLI 可以使用平台中适用于它们的部分。

建筑

Obot平台将用户设备上的AI活动与由Obot服务器管理或代理的服务连接起来。

在用户设备上，桌面代理和工具连接到 Obot 网关，而 Obot Sentry 则扫描、审计并执行设备上发生的 AI 活动政策。Obot CLI 允许用户和 AI 客户端发现、安装和管理已批准的 MCP 服务器和技能。

Obot 服务器提供：

• MCP和LLM网关，用于对MCP服务器和模型提供者的受控访问。

Obot

Obot is an open-source platform for organizations to manage, secure, and govern their AI ecosystems. It provides shared infrastructure for connecting AI clients to models and tools, distributing approved MCP servers and skills, managing agent access and credentials, running hosted AI workloads, and recording activity across hosted services and user devices.

Obot does not require an organization to standardize on a single AI client, model provider, or tool ecosystem. Desktop agents and tools such as Claude Code, Codex, Cursor, VS Code, and other IDEs and CLIs can use the parts of the platform that apply to them.

Architecture

The Obot Platform connects AI activity on user devices with services managed by or proxied through Obot Server.

On user devices, desktop agents and tools connect to Obot gateways, while Obot Sentry scans, audits, and enforces policy on AI activity taking place on the device. The Obot CLI lets users and AI clients discover, install, and manage approved MCP servers and skills.

Obot Server provides:

• MCP and LLM gateways for controlled access to MCP servers and model providers.
• Isolated execution for hosted MCP servers and Claude Environments sessions.
• Platform services for identity and access control, including permissions and secrets.
• Correlated audit logs of AI activity across the platform.
• MCP and Skills registries built on curated Git-backed catalogs.

Obot integrates with remote MCP servers, LLM providers, S3-compatible object storage, Git providers, and auth providers.

Core Capabilities

MCP Gateway

The MCP Gateway is a single governed entry point to every MCP server a user is allowed to reach.

• Expose MCP servers through virtual MCP servers (vMCPs), which combine one or more catalog servers behind a single endpoint, whether those servers are hosted by Obot or run outside it.
• Reach remote MCP servers on private networks through MCP tunnels, which connect outbound to Obot so no inbound port has to be opened.
• Pin each vMCP component to a snapshot of its catalog entry, so catalog changes take effect only through an explicit upgrade.
• Control server and tool access by user or identity-provider group through vMCP profiles.
• Enable tool search on large vMCPs so clients search for and call tools without loading every tool definition into the model’s context.
• Chat with and call tools on any vMCP you can access using the built-in MCP tester.
• Manage MCP OAuth, user and shared credentials, and Kubernetes secret bindings.
• Inspect, reject, or modify MCP requests and responses with MCP, webhook, or built-in credential filters.

LLM Gateway

The LLM Gateway presents provider-compatible endpoints that AI clients use to reach approved models.

• Connect external AI clients to OpenAI, Anthropic, Amazon Bedrock, Azure, and Generic Responses Compatible providers.