IndyKite Agent Gateway

The Indykite Agent Gateway (IAG) is a standalone service that protects exactly one AI agent. Deploy one IAG per protected agent. From the caller's perspective IAG appears as the Target; from the protected agent's perspective IAG appears as the Source. IAG is not a generic reverse proxy — it assumes the agents speak the A2A protocol and tracks A2A sessions so JSON-RPC streams flow correctly.

For each request IAG validates three things:

1. The caller (token introspection at the IdP).
2. The workflow (subject CAN_TRIGGER check via AuthZEN/KBAC).
3. The delegation chain (the request's act chain matches a chain modeled in the IKG).

When to use

Activate this skill when the user: