speakeasy-api/gram

Securely scale AI usage across your organization. Built for humans and agents.
Learn more »
Documentation ·
Running locally ·
Tech Stack ·
Contributing ·
Login ·
Roadmap
# Introduction
This repository is the open source stack behind Speakeasy's AI control plane. Secure and centrally manage MCPs, Skills, and Assistants your whole company to access, with fine-grained permissions, threat detection, and full observability of token use and costs. Every tool call, permission change, and access event logged and searchable. SOC 2 Type II and ISO 27001 certified.
To get started on the hosted platform you can Sign up, or check out the Quickstart guide.
### Supports popular AI providers
    
    
    
    
    
    
## Observe
Track AI usage across teams and measure impact with either tokens or cost. Deep dive expensive sessions, create budgets and measure tool effectiveness. Built on a foundation of Opentelemetry. Exportable and interactive via platform MCP and a built in assistant.
## Secure
Every prompt, response, and agent action is inspected and enforced in real time. Sensitive data is blocked, redacted, or logged before it leaves your environment. Create and enforce flexible policies to prevent prompt injection, log shadow use and detect PII secrets and other sensitive data types.
## Connect
A single control layer for connecting your agents to MCPs for your SaaS vendors, APIs, and internal systems, with policy enforcement and granular access control built in. Private networking and tunneling deployed on demand.
## Distribute
Centralise distribution of MCPs, Skills, Plugins and Assistants to your team based on enterprise roles. Team, server, and tool level permissions enforced through RBAC and Oauth2.1. Synced to your enterprise IDP (Okta, Azure AD, Google Workspace, etc.).
## Support
Chat with us: Join our slack for support and discussions or email us at support@speakeasy.com.
Contribute feature requests or report issues on our roadmap.
Documentation for the platform is available here.
## Running locally
Run ./zero until it succeeds. This script is what you use to run the dashboard and services for local development. It installs dependencies, runs pending database migrations, and starts everything up.
The main dependencies are Mise and Docker. The ./zero script will guide you to install these if they are not found.
Seed your local organization with a realistic working environment — a deployed API, agent sessions, telemetry, risk findings, teammates, and an API key: